Data privacy
We’re glad you’re visiting our website. Protecting your personal data is important to us. Below, we explain how we handle your data in accordance with Article 13 of the General Data Protection Regulation (GDPR).
Who is responsible?
The organisation responsible for data processing on this website is listed in the legal notice (Imprint).
What data do we collect?
When you visit our website, so-called usage data is temporarily evaluated on our web server for statistical purposes in order to improve the quality of our website. This data set consists of:
the name and address of the requested content,
the date and time of the request,
the amount of data transferred,
the access status (content transmitted, content not found),
the description of the web browser and operating system used,
the referral link, which indicates the page from which you accessed our site,
the IP address of the requesting computer, which is shortened so that it can no longer be linked to a person.
The aforementioned log data is evaluated only in anonymized form.
The legal basis for processing usage data is Art. 6(1)(f) GDPR. Processing is carried out based on the legitimate interest in providing website content and ensuring device- and browser-optimized display.
Data security
To protect your data as comprehensively as possible against unauthorized access, we implement technical and organizational measures. We use an encryption procedure on our website. Your data is transmitted via the internet between your device and our server using TLS encryption. You can usually recognize this by the closed padlock symbol in your browser’s status bar and the address line beginning with “https://”.
We only store personal data for as long as necessary to fulfil the purposes described above. Data is deleted once it is no longer needed, unless legal retention obligations apply.
Necessary Cookies
We use cookies on our website that are necessary for the use of our website.
Cookies are small text files that are stored on your device and can be read. A distinction is made between session cookies, which are deleted once you close your browser, and persistent cookies, which are stored beyond an individual session.
We do not use these necessary cookies for analysis, tracking, or advertising purposes.
Some of these cookies only contain information about certain settings and are not personally identifiable. They may also be necessary to enable user navigation, security, and the implementation of the website.
We use these cookies based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.
You can configure your browser to inform you about the placement of cookies. Additionally, you can delete them at any time via the appropriate browser settings and prevent the setting of new cookies. Please note that in this case, our website may not be displayed fully and some functions may no longer be technically available.
Name – Purpose – Storage duration
kirby_session – session management – 2 hours
Anonymous Visitor Measurement
We carry out anonymous visitor measurement on our website. For this purpose, the web server log data and the shortened IP address are evaluated. It is not possible to draw conclusions about your identity.
Contact Form
You have the option to contact us via our contact form. To use our contact form, we initially require the data marked as mandatory fields.
We use this data on the basis of Art. 6(1)(f) GDPR to respond to your inquiry.
In addition, you may decide yourself whether to provide further information. These details are provided voluntarily and are not required to contact us. We process your voluntary data on the basis of your consent.
Your data will be processed solely to respond to your inquiry. We delete your data when it is no longer required and no legal retention obligations prevent deletion. This is generally the case 90 days after the inquiry has been processed.
If your data submitted via the contact form is processed on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time. You may also withdraw your consent to the processing of voluntary data at any time. Please contact the email address provided in the legal notice for this purpose.
Storage Period
Unless we have already informed you in detail about storage periods, we delete personal data when it is no longer required for the aforementioned processing purposes and no legitimate interests or other (legal) retention obligations prevent deletion.
Your Rights as a Data Subject
When processing your personal data, the GDPR grants you certain rights:
Right of Access (Art. 15 GDPR)
You have the right to obtain confirmation as to whether personal data concerning you is being processed; if so, you have the right to access this data and to the information specified in Art. 15 GDPR.
Right to Rectification (Art. 16 GDPR)
You have the right to request the immediate correction of inaccurate personal data concerning you and, where applicable, the completion of incomplete data.
Right to Erasure (Art. 17 GDPR)
You have the right to request the immediate deletion of personal data concerning you if one of the reasons listed in Art. 17 GDPR applies.
Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request restriction of processing if one of the conditions set out in Art. 18 GDPR is met, for example if you have objected to the processing, for the duration of the controller's review.
Right to Data Portability (Art. 20 GDPR)
In certain cases listed in Art. 20 GDPR, you have the right to receive personal data concerning you in a structured, commonly used, and machine-readable format or to request that it be transmitted to a third party.
Right to Withdraw Consent (Art. 7 GDPR)
If data processing is based on your consent, you are entitled under Art. 7(3) GDPR to withdraw your consent to the use of your personal data at any time. Please note that withdrawal only has effect for the future. Processing carried out before withdrawal remains unaffected.
Right to Object (Art. 21 GDPR)
If data is collected on the basis of Art. 6(1)(f) GDPR (processing for legitimate interests) or Art. 6(1)(e) GDPR (processing in the public interest or in the exercise of official authority), you have the right to object at any time on grounds relating to your particular situation. We will then no longer process your personal data unless there are compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.
Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)
Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations. This right may be exercised, in particular, before a supervisory authority in the Member State of your habitual residence, place of work, or the place of the alleged infringement.
How to exercise your rights
To exercise your rights, please contact the organisation listed in the Imprint.
Contact our Data Protection Officer
If you have any questions about data protection, you can also contact our external Data Protection Officer:
datenschutz nord GmbH
Sechslingspforte 2
22087 Hamburg
🌐 https://www.dsn-group.de/
✉️ office@datenschutz-nord.de
Please include the responsible organisation (as listed in the Imprint) when contacting them.