Introduction
This website is operated by: Sonja Neumeyer.
We consider it very important to handle the data of our website visitors in a trustworthy manner and to protect it to the best of our ability. For this reason, we make every effort to comply with the requirements of the GDPR.
In the following, we explain how we process your data on our website. We use the clearest and most transparent language possible so that you truly understand what happens to your data.
2. General Information
2.1 Processing of Personal Data and Other Terms
Data protection applies to the processing of personal data.
Personal data means all data with which you can be personally identified. This includes, for example, the IP address of the device (PC, laptop, smartphone, etc.) you are currently using to access the site. Such data is processed when “something happens” with it. For example, the IP is transmitted from the browser to our provider and automatically stored there. This constitutes processing (according to Art. 4 No. 2 GDPR) of personal data (according to Art. 4 No. 1 GDPR).
These and other legal definitions can be found in Art. 4 GDPR.
2.2 Applicable Regulations / Laws – GDPR, BDSG, and TTDSG
The scope of data protection is regulated by laws. In this case, these are the GDPR (General Data Protection Regulation) as a European regulation and the BDSG (Federal Data Protection Act) as a national law.
In addition, the TTDSG supplements the provisions of the GDPR, insofar as it concerns the use of cookies.
2.3 The Controller
Responsible for data processing on this website is the controller within the meaning of the GDPR. This is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
You can reach the controller at:
Sonja Neumeyer
Eckenerstr. 14
89231 Neu-Ulm
2.4 How Data is Processed on this Website in Principle
As we have already determined, there are data (e.g., IP address) that are automatically collected. These data are mainly needed for the technical provision of the homepage.
If we use personal data beyond this or collect other data, we will inform you about it or ask for consent.
You consciously provide us with other personal data.
You can find detailed information on this below.
2.5 Your Rights
The GDPR grants you comprehensive rights. These include, for example, free information about the origin, recipient, and purpose of your stored personal data. You can also request the correction, blocking, or deletion of this data or complain to the responsible data protection supervisory authority.
You can revoke your consent at any time.
You can find out what these rights look like in detail and how to exercise them in the last section of this privacy policy.
2.6 Data Protection — Our Perspective
Data protection is more than just a burdensome duty for us! Personal data has great value, and handling this data carefully should be self-evident in our digitized world. Furthermore, as a website visitor, you should be able to decide for yourself what, when, and by whom “something happens” with your data. Therefore, we are committed to complying with all legal regulations. We only collect the data necessary for us and treat it confidentially.
2.7 Disclosure and Deletion
Disclosure and deletion of data are also important and sensitive issues. Therefore, we would like to inform you briefly in advance about our general approach to this.
Disclosure of data only takes place on the basis of a legal basis and only if it is unavoidable.
This can be the case, in particular, if it concerns a so-called data processor and a data processing agreement pursuant to Art. 28 GDPR has been concluded.
We delete your data when the purpose and legal basis for processing cease to apply, and there are no other legal obligations to prevent deletion. Article 17 GDPR also provides a ‘good’ overview of this.
For further information, please refer to this privacy policy and contact the controller if you have any questions.
2.8 Hosting
This website is hosted externally. The personal data collected on this website is stored on the host’s servers. This includes, on the one hand, the automatically collected and stored log files (see below for details), as well as any other data provided by website visitors.
External hosting is for the purpose of securely, quickly, and reliably providing our website and, in this context, fulfilling our contractual obligations to our potential and existing customers.
The legal basis for processing is Art. 6 para. 1 lit. a, b, and f GDPR, as well as § 25 para. 1 TTDSG, insofar as consent includes the storage of cookies or access to information on the end device of the website visitor or user within the meaning of the TTDSG.
Our host only processes data that is necessary to fulfill its obligations and acts as our data processor, i.e., it is subject to our instructions. We have concluded a corresponding contract for order processing with our host.
We use the following host:
SiteGround
SiteGround Spain S.L., Calle de Prim 19, 28004 Madrid, Spain
https://de.siteground.com/privacy.htm.
2.9 Legal Basis
The processing of personal data always requires a legal basis. Article 6 (1) sentence 1 of the GDPR provides the following possibilities:
a) The data subject has given consent to the processing of personal data relating to him or her for one or more specific purposes;
b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
c) processing is necessary for compliance with a legal obligation to which the controller is subject;
d) processing is necessary to protect the vital interests of the data subject or of another natural person;
e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
In the following sections, we will specify the concrete legal basis for each processing activity.
3. What Happens on Our Website
By visiting our website, we process personal data from you.
To best protect this data against unauthorized access by third parties, we use SSL or TLS encryption. You can recognize this encrypted connection by the fact that an https:// or a padlock symbol is displayed in the address bar of your browser.
Below, you will learn which data is collected when visiting our website, for what purpose this is done, and on what legal basis.
3.1 Data Collection When Accessing the Website
When you access the website, information is automatically stored in so-called server log files. This includes the following information:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is temporarily required to permanently and smoothly display our website to you. In particular, this data serves the following purposes:
- System security of the website
- System stability of the website
- Error troubleshooting on the website
- Connecting to the website
- Displaying the website
Data processing is carried out in accordance with Art. 6 (1) lit. f GDPR and is based on our legitimate interest in processing this data, particularly from the perspective of ensuring the functionality and security of the website.
This data is stored pseudonymously whenever possible and deleted once the respective purpose has been achieved.
If the server log files allow the identification of the data subject, the data will be stored for a maximum period of 14 days.
An exception occurs if a security-relevant event occurs. In this case, the server log data will be stored until the security-relevant event is rectified and conclusively clarified. Furthermore, there is no merging with other data.
3.2 Cookies
3.2.1 General
This website uses so-called cookies. These are data records, information that is stored in the browser of your end device and is related to our website. By setting cookies, navigation of the website can be facilitated for the visitor in particular.
3.2.2 Declining Cookies
The setting of cookies can be prevented by adjusting the settings of your browser. Here you will find the corresponding links to commonly used browsers: Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen?redirectslug=Cookies+%C3%B6schen&redirectlocale=de Google Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=de Microsoft Edge: https://support.microsoft.com/de-de/windows/1%C3%B6schen-und-verwalten-von-cookies-168dab11-0753-043d-7c16-ede5947fc64d Safari: https://support.apple.com/de-de/guide/mdm/mdmf7d5714d4/web and https://support.apple.com/de-de/guide/safari/sfri11471/mac
If you use a different browser, it is recommended to enter the name of your browser and ‘delete and manage cookies’ into a search engine and follow the official link to your browser.
Alternatively, you can also manage your cookie settings at www.aboutads.info/choices/ or www.youronlinechoices.com.
However, we must inform you that comprehensive blocking/deletion of cookies may lead to impairments in the use of the website.
3.2.3 Technically Necessary Cookies
We use technically necessary cookies on this website to ensure that our website works flawlessly and in accordance with applicable laws. They help to make the website user-friendly. Some functions of our website cannot be displayed without the use of cookies.
The legal basis for this is, depending on the individual case, Art. 6 (1) lit. b, c and/or f GDPR.
3.2.4 Technically Unnecessary Cookies
In addition, we also use cookies on our website that are not technically necessary. These cookies serve, among other things, to analyze the surfing behavior of the website visitor or to provide functions of the website that are not technically mandatory.
The legal basis for this is your consent in accordance with Art. 6 (1) lit. a GDPR.
Technically unnecessary cookies are only set with your consent, which you can revoke at any time in the cookie consent tool.
3.3 Data Processing by User Input
a) Contact Form
We offer a contact form. This is used to contact our company.
In this form, we typically process your first and last name, your telephone number, your email address, a postal address, and the content of the message. The data is stored on our web server and internally forwarded to the responsible email addresses.
The legal basis for data processing is Art. 6 (1) lit. f GDPR, as we have a legitimate interest in responding to your inquiry and providing an easy way to contact us. If the contact aims at concluding a contract, an additional legal basis for processing is Art. 6 (1) lit. b GDPR.
We delete this data at the latest 3 months after receipt, unless it is needed for an existing contractual relationship.
We integrate the contact form from WordPress Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, United States of America, on our website.
3.4 Analysis and Tracking Tools
3.4.1 WP Statistics
We utilize WP Statistics on this website. WP Statistics is a web analysis service provided by Veronalabs, Tatari 64, 10134, Tallinn, Estonia.
With the help of WP Statistics, we can analyze the usage of our website. For this purpose, log files and actions of the website visitor on the page are recorded. The IP address collected in the process is shortened so that it can no longer be directly attributed to any user. The collected data is stored exclusively on our server.
The legal basis for processing is Art. 6 (1) lit. f GDPR. We have a legitimate interest in analyzing user behavior on our website in order to optimize our web offering and advertising.
3.5 Third-party Content
3.5.1 Polylang
We offer the functions of Polylang on our website. This service is provided by WP SYNTEX, 28 rue Jean Sebastien Bach, 38090 Villefontaine, France.
Polylang is a WP plugin that can translate posts, pages, media, tags, widgets, and navigation menus.
The Polylang plugin does not send any personal data of the website visitor to the company WP SYNTEXT. However, the Polylang plugin may set a cookie that remembers the language chosen by the user when the user revisits the website. This cookie has a standard expiration time of 1 year.
The legal basis for processing is Art. 6 (1) lit. f GDPR. We have a legitimate interest in being able to translate our website into various languages in order to offer our internet presence internationally.
For more information: https://polylang.pro/privacy-policy/.
4. Other Important Information
4.1 Your Rights in Detail
4.1.1 Right to Information according to Art. 15 GDPR
You have the right to request information as to whether personal data about you is being processed. If this is the case, you can request further information about the nature and manner of the processing. A detailed list can be found in Art. 15 (1) lit. a to h GDPR.
4.1.2 Right to Rectification according to Art. 16 GDPR
This right includes the correction of incorrect data and the completion of incomplete personal data.
4.1.3 Right to Erasure according to Art. 17 GDPR
This so-called “right to be forgotten” gives you the right, under certain conditions, to request the deletion of personal data by the controller. This is generally the case if the purpose of the data processing has ceased, if consent has been revoked, or if the initial processing was carried out without legal basis. A detailed list of reasons can be found in Art. 17 (1) lit. a to f GDPR. This “right to be forgotten” also corresponds to the obligation of the controller under Art. 17 (2) GDPR to take appropriate measures to achieve a general deletion of the data.
4.1.4 Right to Restriction of Processing according to Art. 18 GDPR
This right is linked to the conditions according to Art. 18 (1) lit. a to d.
4.1.5 Right to Data Portability according to Art. 20 GDPR
Here, the basic right to receive your own data in a common format and to transmit it to another controller is regulated. However, this only applies to data processing based on consent or contract according to Art. 20 (1) lit. a and b and to the extent that this is technically feasible.
4.1.6 Right to Object according to Art. 21 GDPR
You can generally object to the processing of your personal data. This applies in particular when your interest in objection outweighs the legitimate interest of the controller in processing, and when the processing relates to direct marketing and/or profiling.
4.1.7 Right to “Individual Decision” according to Art. 22 GDPR
You generally have the right not to be subject to a decision based solely on automated processing (including profiling) that has legal effect on you or significantly affects you in a similar manner. However, this right is subject to restrictions and supplements in Art. 22 (2) and (4) GDPR.
4.1.8 Other Rights
The GDPR includes comprehensive rights to inform third parties about whether or how you have asserted rights under Art. 16, 17, 18 GDPR. However, this is only to the extent that it is possible or feasible with reasonable effort.
At this point, we would like to remind you again of your right to revoke consent given according to Art. 7 (3) GDPR. However, the legality of processing carried out up to that point is not affected by this.
Furthermore, we would also like to draw your attention to your rights according to §§ 32 et seq. BDSG, which are largely identical in content to the rights described above.
4.1.9 Right to Lodge a Complaint according to Art. 77 GDPR
You also have the right to lodge a complaint with a data protection supervisory authority.
5. What if the GDPR is repealed tomorrow or other changes occur?
The current status of this privacy policy is March 21, 2024. From time to time, it is necessary to adjust the content of the privacy policy to respond to actual and legal changes. Therefore, we reserve the right to change this privacy policy at any time. We will publish the amended version in the same place and recommend that you read the privacy policy regularly.