Privacy declaration
Responsible Authority
We are happy about your visit to our website. We would like to introduce ourselves as the responsible authority within the meaning of data protection law:
Cornelia Gräf
Kettengasse 5
69117 Heidelberg
Phone: +49 6221 20833
E-mail: kontakt@corneliagraef.de
General Information
Pursuant to our statutory obligations, we would like to inform you about the collection and use of your personal data.
When you use our website, personal data about you will be collected. This may happen by you entering the data yourself, for example your e-mail address. But our system also collects your data automatically, for example whenever you visit our website. This happens irrespective of the device or the software that you use to visit our website.
All data that you enter in our app is provided voluntarily; there are no disadvantages to you if you do not provide data. But without certain data, we are unable to provide services or to conclude contracts. Whenever such information is necessary, we will point it out to you.
On this website, the user’s personal data is only collected within the framework of the existing data-protection law, in particular the General Data Protection Regulation (GDPR). The legal terms used in the text are defined in Art. 4 of the GDPR.
The GDPR allows data processing in three cases in particular:
- in accordance with Art. 6 para. 1 (a) and 7 GDPR, when you have consented to us processing your data; in this Privacy Policy and in the cases of consent pursuant to Art. 4 no. 11 GDPR, we will inform you in detail and each time for what purposes and under what circumstances your data will be processed by us;
- in accordance with Art. 6 para. 1 (b) GDPR, when processing your personal data is necessary for negotiating, concluding or performing a contract;
- in accordance with Art. 6 para. 1 (f) GDPR, if the balancing of interests leads to the conclusion that the processing is necessary to protect our legitimate interests; this means in particular our interests to analyse, optimise and secure the offers on our website – meaning primarily the analysis of user behaviour, setting up profiles for advertisement purposes and storage of access data as well as the use of third-party providers.
Inventory Data
ACHTUNG diese Übersetzung ist noch in Arbeit. bitte frage sie per E-Mail bei uns an: mail@easyrechtssicher.de
Usage Data
ACHTUNG diese Übersetzung ist noch in Arbeit. bitte frage sie per E-Mail bei uns an: mail@easyrechtssicher.de
ACHTUNG diese Übersetzung ist noch in Arbeit. bitte frage sie per E-Mail bei uns an: mail@easyrechtssicher.de
Consent
Whenever we ask you for your consent for the processing of your data, we will inform you in clear language and in an easily accessible way about the cases for which you will be granting your consent. Any consent that we ask you for is voluntary. Any advantage that you wish to gain by granting consent is also available without consent; simply ask us.
Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.
Storage Period
ACHTUNG diese Übersetzung ist noch in Arbeit. bitte frage sie per E-Mail bei uns an: mail@easyrechtssicher.de
Cookies
Cookies
ACHTUNG diese Übersetzung ist noch in Arbeit. bitte frage sie per E-Mail bei uns an: mail@easyrechtssicher.de
Users‘ Rights
You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.
Deletion, Correction, Limitation
You may at any time demand from us that we correct (or complete) incorrect data as well as a limitation of the processing of data or deletion of your data. This applies in particular if the reason for processing the data is no longer valid, if a required consent has been revoked and there is no other legal basis or if our data processing is unlawful. We will then correct, block or even delete your personal data without delay as far as permitted by law.
Objection
The right to object to advertisement is governed by our text regarding consent:
Data Transfer
You may request us to transfer the data stored about you in machine-readable form.
Complaint
If you feel that our data processing has violated any of your rights, you may file a complaint with the competent regulatory agency (here you find a list of the agencies).
Changes to the Privacy Policy
If and when factual or legal reasons will compel us to amend the Privacy Policy, we will update this page accordingly. This will not change the consent provided by the user.
Social Media
Social Media Plugins
General information
Social media plugins normally lead to the IP address of each visitor to a page being collected by theses services immediately and the users having their subsequent browsing history recorded. This may even happen if you do not click on the button.
To prevent this, we use the Shariff method. Thus, our social media buttons only establish the direct contact between the social network and you only once you click on the respective share button. If you are already registered with a social network, Facebook and Google+ do not require a new window for this. Twitter will show a pop-up window, in which you can still edit the text of the tweet.
Thus, you can publish our content in social networks without them being able to put together complete browsing profiles. The Shariff method is already being used by many websites in order to protect their users.
But, at the latest, when you follow the link to the social media site, your data will be broadcasted to that site. The social media site will normally store a cookie in your browser and to your account information there, especially, if you are logged into your social media account on the site. The social media site can analyse your use of the platform and your browsing habits and will use these for targeting advertisements based on your interests. That can lead to ads being shown to you when browsing in- and outside of the social media site. Please inform yourself about the use of your data on these sites and use them only, when you agree to that use of your data, that happens on that social media site, in particular, when you are not using that social media site for the first time. We have added links to all the privacy policies of the social media site for your information.
Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use plugins of the social network of Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Due to the Shariff method, Facebook will only learn your IP address and your visit to our website, once you will have clicked on the button. If you confirm the plugin while being logged in at Facebook, Facebook may attribute your use to your user account.
That way, your data will be transferred to the USA, Facebook is registered with Privacy Shield and must adhere to the EU data protection rules.
The collection and use of your data which is then possibly carried out by Facebook is beyond our knowledge or control. You will find further information in Facebook’s privacy policy at http://de-de.facebook.com/policy.php.
Regarding the general approach to cookies and their deactivation, we refer you to our general information in this Privacy Policy.
Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use plugins of the social network LinkedIn, provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, as a subsidiary of LinkedIn Corporation, 2029 Stierlin Ct. Ste. 200 Mountain View, CA 94043, USA. With the Shariff method, LinkedIn will only learn of your IP address and your visit to our website once you have clicked on the button. If you confirm the plugin while being logged into LinkedIn, LinkedIn may attribute your use to your user account.
The data collected by Linkedin may be transferred by Linkedin to countries outside of the EU, in particular to the USA. LinkedIn is registered with Privacy Shield and must adhere to EU data protection rules.
We have neither knowledge of, nor any influence on the possible collection and processing of your data by LinkedIn. Further information can be found in LinkedIn’s privacy policy at: https://www.LinkedIn.com/legal/privacy-policy?_l=de_DE. For the general approach to cookies and their deactivation as well as regarding the passing of data to third parties, particularly to the USA, we refer you to our general information in this Privacy Policy.
Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the Xing share plugin of the social network Xing, XING AG, Dammtorstrasse 30, 20354 Hamburg, Germany. If you click on this button, your browser will connect with Xing to execute the features. In that process, none of your personal data will be stored by Xing stored, nor will your use be recorded by a cookie.
Further information can be found in Xing’s privacy policy at https://www.xing.com/privacy. For the general approach to cookies and their deactivation, we refer you to the general instructions in this Privacy Policy.
Social Media Links
General Information
We refer with links to our social media presences. When you follow any such link to the social media site, your data will be broadcasted to that site. The social media site will normally store a cookie in your browser and to your account information there, especially, if you are logged into your social media account on the site. The social media site can analyse your use of the platform and your browsing habits and will use these for targeting advertisements based on your interests. That can lead to ads being shown to you when browsing in- and outside of the social media site. Please inform yourself about the use of your data on these sites and use them only, when you agree to that use of your data, that happens on that social media site, in particular, when you are not using that social media site for the first time. We have added links to all the privacy policies of the social media site for your information.
Our website uses links to our presence in the social network of Facebook by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. It is just a normal link. Thus, when you open our site, Facebook will not learn of your visit to our website. But once you click on the link, you will be led to Facebook, allowing Facebook to learn that you have visited out site.
That way, your data will be transferred to the USA, but Facebook is registered with Privacy Shield and must adhere to the EU data protection rules.
The collection and use of your data which is possibly carried out by Facebook after clicking on the link is beyond our knowledge or control. You may find further information in Facebook’s privacy policy at http://de-de.facebook.com/policy.php.
Our website uses links to our presence in the social network of Instagram by Instagram LLC, now
Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour.
It is just a normal link. Thus, when you open our site, Instagram will not learn of your visit to our website. But once you click on the link, you will be led to Instagram, allowing Instagram / Facebook to learn that you have visited out site.
That way, your data will be transferred to the USA, but Instagram is registered with Privacy Shield and must adhere to the EU data protection rules.
The collection and use of your data which is possibly carried out by Instagram/Facebook after clicking on the link is beyond our knowledge or control. You may find further information in Instagram’s privacy policy at
https://help.instagram.com/155833707900388.
Our page uses links to our presence on the social network LinkedIn, provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, as a subsidiary of LinkedIn Corporation, 2029 Stierlin Ct. Ste. 200 Mountain View, CA 94043, USA.
It is just a normal link, which means that upon opening our page, LinkedIn won’t learn anything of your visit to our website. But when you click on the link, you will be taken to LinkedIn, and then LinkedIn will also learn that you visited our page.
Thus, your data may be forwarded to the USA, but LinkedIn is registered with Privacy Shield and must adhere to EU data protection rules.
We have neither knowledge of, nor any influence on the possible collection and processing of your data by LinkedIn after clicking on the link. Further information can be found in LinkedIn’s privacy policy at https://www.LinkedIn.com/legal/privacy-policy?_l=de_DE.
Our page uses links to our presence in the social network Xing by XING SE, Dammtorstrasse 30, 20354 Hamburg, Germany.
It is just a normal link, which means that upon opening our page, Xing won’t learn anything of your visit to our website. But when you click on the link, you will be taken to Xing, and then Xing will also learn that you visited our page.
We have neither knowledge of, nor any influence on the possible collection and processing of your data by Xing after clicking on the link. Further information can be found in Xing’s privacy policy at https://www.xing.com/privacy
Google Analytics
Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the Google Analytics tool provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. This allows to analyse the use of websites and to put together pseudonymous profiles of users based on the data. In order to do this, Google applies different technologies, among them also storing cookies on your computer. These store information about the use of our page, which we will use to improve our offers.
The data collected by Google may be transferred by Google to countries outside of the EU, in particular to the USA. Google has subjected itself to the Privacy Shield Framework
We have taken additional precautions to ensure the appropriate protection of your data as far as possible. Before transferring it to Google, we anonymize your IP address. This is achieved by activating the Anonymizelp() feature in the tracking code of Google Analytics.
We have also concluded a contract with Google about the processing of data, according to which Google will not combine your data with other data collected by Google in order to find out your identity.
If this should not be sufficient for you, you can also use the link http://tools.google.com/dlpage/gaoptout
to download and install a browser plugin provided by Google to block Google Analytics, preventing Google from collecting and transferring your personal data.
You can also prevent the data collection by Google Analytics by confirming the subsequent link deactivate Google Analytics to deactivate Google Analytics by setting an opt-out cookie which will also prevent the collection of your data.
You will find more information about Google’s precautions regarding data protection at the following link:
https://www.google.de/intl/de/policies/privacy/.
Additionally for the general handling with cookies, their deactivation and transfer of data to third parties (in particular USA) we refer to the general part of this declaration.
Website Analysis
WordPress.com-Stats
Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the tool WordPress.com Stats, an analysis tool provided by Automattic, Inc. 132 Hawthorne Street, San Francisco, CA 94107, USA, which uses the tracking technology provided by Quantcast Inc., 201 3rd St, Floor 2, San Francisco, CA 94103-3153, USA.
This analysis tool uses certain technologies, particularly cookies, which are stored on your computer. They store information about your use of our page. The data will be forwarded to the USA, but will be anonymised before. Automattic Inc. has subjected itself to the Privacy Shield framework.
You can prevent the collection and use of your personal data by Automattic at any time by clicking on the opt-out on the page which can be reached through the following link: http://www.quantcast.com/opt-out. This will place an opt-out cookie. If you want to obtain information about the data-protection policies of Quantcast, please use the following link: https://www.quantcast.com/privacy/
For the general approach to cookies and their deactivation as well as regarding the passing of data to third parties, particularly to the USA, we refer you to our general information in this Privacy Policy.
E-Commerce Platforms
Amazon affiliate programme
Based on our legitimate interest in an economical online offering pursuant to Art. 6 para. 1 (f) GDPR, we take part in the Amazon EU affiliate programmes of Amazon Europe Core S.à.r.l., of Amazon EU S.à.r.l, of Amazon Services Europe S.à.r.l. and of Amazon Media EU S.à.r.l., all four registered at 5, Rue Plaetis, L-2338 Luxembourg, as well as Amazon Instant Video Germany GmbH, Domagkstrasse 28, 80807 München, Germany.
On our website, you find ads by Amazon and links to offers on Amazon. If you click from our website onto an ad or such a link, Amazon will use cookies that are stored on your computer that you have clicked from our website. We will receive an affiliate commission for that.
You can find information about the use of your data by Amazon in Amazon’s privacy policy: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401
You have the option to choose the preferences for cookies to be placed on your computer or to prevent this completely. On this subject, we refer you to the above information in this Privacy Policy about cookies.
Our Social Media Fan Page(s) – General Information
Beside our website, we also use fan page(s) on social media platforms. Above, we have already informed you about the data processing on our website and we have in particular made sure that the fact alone that you access our website is not yet forwarded to the social media platform. Following the ECJ ruling dated 5 June 2018 about social media presences, we want to inform you about the data processing during your visit to our social media fan page(s):
On the basis of our legitimate interest in a timely customer communication pursuant to Art. 6 para. 1 (f) GDPR as well as for advertising and public relations purposes, we present ourselves and our offers on social media fan page(s).
Our social media fan page(s) usually can be accessed online independently of you having a user account with the relevant platform or not. But in either case, your data will be processed by the social media platform.
Each time the social media platform is accessed, your IP address will be collected and stored. Usually, a cookie will also be placed on your page, which will save your visit and further data about your visit to the social media platform.
If you are logged in with the social media platform, your visit will also be spotted by a cookie or through other technological means and will be attributed to your user account. Thus, the social media platform is usually able to analyse your user behaviour. In this process, a user profile with your interests is generated, which the social media platform will use to provide you with a user experience tailored to your interests, in particular advertisement tailored to your interests within and outside of the social media platform – even across different devices, if applicable. Your data may also be used for market research. For the details, we refer you to the following privacy policies of the social media platform(s) used by us.
We can usually also use the data of the social media platform in order to allow you to use our fan page in accordance with your interests or to approach you with advertising.
When you interact with our fan page and if you are logged in with the relevant social media platform, according to the social media page’s terms of use, we can usually also recognise your user profile and see your content.
If you do not want this, we point you to our explanations about cookies above, with general information about cookies and their deactivation. There, we have laid out in general terms how you can prevent or limit cookies being stored on your devices. Further information about the respective social media platform can be found hereinafter.
According to the aforementioned ECJ ruling dated 5 June 2018, we are always jointly responsible for our social media fan page(s) together with the relevant social media platform. This means that you may also exercise your general rights, which we have listed in detail above under the heading “Users’ Rights”, against us. To that purpose, we refer you to our contact details at the beginning of this Privacy Policy. Please keep in mind, though, that we have no conclusive knowledge of the exact scope of the processing of your data by the social media platform and have even less influence on it. Therefore, we kindly ask you to contact the relevant social media platform in the first place regarding your rights.
We generally leave your data on the social media platform and do not import it onto our server. But if that should occur, our general information regarding the storage period will apply.
Further information about the processing of your data and the storage period on the social media platform can be found in the respective privacy policy of the social media platform, which we have listed hereinafter.
We present ourselves on the social media platform Facebook.
Joint Responsibility
Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland
Contact
Contact Data Protection Officer
If you open our fan page on Facebook, your data will be forwarded to the USA, but Facebook is registered with Privacy Shield and must adhere to EU data protection rules.
Facebook has concluded an agreement with us https://www.facebook.com/legal/terms/page_controller_addendum
about our shared responsibility for processing the data, in which it recognises its primary responsibility and guarantees in particular that you can exercise your right to information, as described in the general part. You may obtain more information from Facebook’s privacy policy at: http://de-de.facebook.com/policy.php.
Facebook also provides us with statistics as part of “Facebook Insights” for the purpose of targeted advertising. These are created without our participation and then provided to us. The data include information like interaction with our page, such as likes, page activities, video views, reach of our posts, comments, sharing of content, clicks on offers or further information on our fan page as well as statistical data about those interacting, such as gender, origin by country, city and language. The same applies to groups which we may manage.
When you are logged in, you can influence the processing of your data by Facebook considerably and in different ways.
Here you can make changes to your timeline, i.e. what can be seen about you and your page: https://www.facebook.com/settings/?tab=timeline&privacy_source=timeline_gear_menu .
And you can change your advertisement preferences here: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.
We have a presence on the social media platform Instagram. Instagram is now owned by Facebook.
Jointly Responsible
Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland
Contact Data Protection Officer
If you open our profile on Instagram, your data will be forwarded to the USA, but Facebook is registered with Privacy Shield and must adhere to EU data protection rules.
We have neither knowledge of, nor any influence on the possible collection and processing of your data by Facebook and Instagram. Further information can be found in Instagram’s privacy policy at https://help.instagram.com/519522125107875.
Instagram and Facebook also provide us with statistics as part of “Facebook Insights” for the purpose of targeted advertising. These are created without our participation and then provided to us. The data include information like interaction with our page, such as likes, page activities, video views, reach of our posts, comments, sharing of content, clicks on offers or further information on our fan page as well as statistical data about those interacting, such as gender, origin by country, city and language. The same applies to groups which we may manage.
When you are logged in, you can influence the processing of your data by Instagram considerably and in different ways.
Your content, i.e. what is visible of you and your profile, can be changed here: https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/.
We have a presence on the social media platform LinkedIn.
Jointly Responsible
LinkedIn Ireland Limited Company,
Wilton Place,
Dublin 2,
Ireland
If you open our profile on LinkedIn, your data may be forwarded to the USA, but LinkedIn is registered with Privacy Shield and must adhere to EU data protection rules.
We have neither knowledge of, nor any influence on the possible collection and processing of your data by LinkedIn. Further information can be found in LinkedIn’s privacy policy at
https://www.LinkedIn.com/legal/privacy-policy.
LinkedIn also provides us with statistics. These are created without our participation and then provided to us. The data will include interactions, for example, as well as statistical data.
When you are logged in, you can influence the processing of your data by LinkedIn considerably and in different ways.
For your privacy settings with LinkedIn, LinkedIn refers you to several options that you can read about in their privacy policy.
The LinkedIn advertising cookie can be turned off here (opt-out):
https://www.LinkedIn.com/psettings/guest-controls/retargeting-opt-out
We have a presence on the social media platform Xing.
Jointly Responsible
XING SE,
Dammtorstrasse 29-32,
20354 Hamburg,
Germany
Phone: +49 40 419 131-0,
Fax: +49 40 419 131-11,
E-mail: info@xing.com.
Data Protection Officer:
Felix Lasse,
Dammtorstrasse 30,
20354 Hamburg,
Germany,
E-mail: Data Protection Officer@xing.com
We have neither knowledge of, nor any influence on the possible collection and processing of your data by Xing. Further information can be found in Xing’s privacy policy at
https://privacy.xing.com/de/datenschutzerklaerung.
Xing also provides us with statistics. These are created without our participation and then provided to us. The data will include interactions, for example, as well as statistical data.
For your privacy settings with Xing, Xing refers you to several options that you can read about in their privacy policy.
Built with WordPress PlugIn of https://easyrechtssicher.de
This is our current valid privacy policy from 20.09.2019