Privacy policy

With this data protection declaration, we inform you as the responsible party about the type, scope and purpose of the processing of your personal data within our online offer and the associated services.

I. Definitions

This data protection declaration is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). To ensure that this statement is comprehensible, we explain the terms used in advance. Insofar as you find references to legal regulations below without specifying the exact name of the respective law, the GDPR is meant.

Personal data

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Person responsible

"Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Processing

"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Third

"Third party" means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

Consent

"Consent" means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Profiling

"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

II Contact details of the controller and the data protection officer

Controller responsible for the processing:

Dr. Tim-Werner Linne

Boschstrasse 1

32107 Bad Salzuflen

Phone: +49 5222 8079466

E-mail: tim.linne@linne.law

Contact details of the data protection officer:

Dr. Tim-Werner Linne

Boschstrasse 1

32107 Bad Salzuflen

Phone: +49 5222 8079466

E-mail: tim.linne@linne.law

III Type and scope of the processing of personal data

We only process your personal data to the extent necessary to provide this website and our services. The data will only be processed if this is permitted by law. If you give your consent, further processing is also possible.

Visit our website

When you visit our website, the browser you use automatically sends information to our website server. The following information is temporarily stored in log files:

Date and time of access to the website,

Your Internet Protocol address (IP address),

Internet service provider of the accessing system,

Browser type and operating system used,

Websites from which you came to our website,

Websites that are accessed by your system via our website.

The legal basis for the storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR.

The data is processed to ensure the functionality of our website. In addition, the data is used for the technical optimization of the website and the security and stability of our information technology systems.

We do not use this data for marketing purposes or to draw conclusions about your person.

The personal data will be deleted as soon as it is no longer required for the purpose for which it was collected.

When data is stored in log files, the data is deleted after seven days at the latest.

If your IP address is stored beyond this, it will be deleted or anonymized.

The processing of this data in log files is essential for the provision of the website. You therefore have no right to object to this.

When you visit our website, we process further personal data by using certain analysis services. You will find more detailed explanations on this under Section IV. of this declaration.

Contact us

If you contact us (e.g. by email, contact form, telephone or social media), your personal data will be processed to handle the contact request and process it. The legal basis for this processing of the transmitted data is Art. 6 para. 1 sentence 1 lit. b GDPR. We delete this data as soon as it is no longer required to achieve the purpose for which it was collected, i.e. regularly when the respective conversation with you has ended. The conversation is ended when the matter in question has been finally clarified. Otherwise, the statutory retention periods apply. This data is not passed on to third parties.

Newsletter

a. Order newsletter

You can subscribe to a free newsletter on our website at any time, i.e. consent to receiving the newsletter.

You can subscribe to our newsletter using the double opt-in procedure. This procedure consists of you receiving an e-mail after registration in which we ask you to confirm your registration. This step is necessary so that no one can register with a third-party e-mail address. We log this registration in order to verify the registration process in accordance with legal requirements and to prevent misuse. For this purpose, we process the time of registration and confirmation and your IP address.

In addition, your personal data from the input mask will be transmitted to us when you register. To subscribe to the newsletter, it is sufficient to enter an e-mail address. Optionally, you can enter your first name, surname and title. This information is required in order to be able to address you personally in the newsletter.

Your personal data will be stored for as long as you have subscribed to the newsletter. This data will not be passed on to third parties and will only be used to send the newsletter.

If you have given your consent, we will use your e-mail address to send you our newsletter on a regular basis. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

b. Unsubscribe from the newsletter

You can unsubscribe from our newsletter at any time and thus revoke your consent to receive the newsletter. You can unsubscribe from the newsletter via a link at the end of each newsletter.

IV. Analysis services: cookies and tracking

Use of cookies

We use so-called cookies on our website. These are small text files that are automatically stored in the Internet browser or by the Internet browser on your end device (e.g. computer, tablet, smartphone, etc.) when you visit our website. These cookies contain characteristic character strings that enable the Internet browser to be uniquely identified when the website is called up again.

We use cookies to make our website more user-friendly. These cookies enable us to automatically recognize when you visit our site again that you have already visited us, e.g. as a logged-in user. These cookies are automatically deleted after a defined period of time. The data processed in this way is required for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

You can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If you deactivate the setting of cookies in the Internet browser you are using, you may not be able to use all the functions of our website to their full extent.

Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; hereinafter "Google"). Google has submitted to the EU-US Privacy Shield Framework (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

However, if IP anonymization is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage.

The legal basis for the use of Google Analytics is Art. 6 para. 1 lit. f GDPR. The data sent by us is automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month.

YouTube

Integration of videos on the "YouTube" platform of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The privacy policy of this third-party provider can be found at https://www.google.com/policies/privacy/. Information on restricting/deactivating the transmission of information/advertising can be found at https://adssettings.google.com/authenticated.

Right of objection

You have the right to object. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can also prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent future collection when you visit this website: Deactivate Google Analytics.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help at the following link: https://support.google.com/analytics/answer/6004245?hl=de.

Integration of other third-party services

We use offers from third-party providers within our website to optimize our Internet presence in order to integrate their content and services, e.g. videos or fonts, into our website (hereinafter uniformly referred to as "services"). This integration requires that the providers of these services process your IP address. As this cannot be technically prevented, the processing of the IP address is therefore necessary for the use and implementation of the services. We always endeavor to use only those services whose respective providers process the IP address only for the direct provision of the services. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "web beacons" can be used to analyze and evaluate various information, e.g. the visit to our website. In pseudonymized form, information can also be stored in cookies on your end device, whereby technical information about your browser and operating system used, linked websites, visit time and other information about the use of our website can be processed. The legal basis for this processing of the transmitted data is Art. 6 para. 1 lit. f GDPR. The services that may be used are as follows:

Google Maps

Integration of maps from the "Google Maps" service of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The privacy policy of this third-party provider can be found at https://www.google.com/policies/privacy/. Information on restricting/deactivating the transmission of information/advertising can be found at https://adssettings.google.com/authenticated.

Google Fonts

Integration of fonts from the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (see https://www.google.com/fonts). The privacy policy of this third-party provider can be found at https://www.google.com/policies/privacy/. Information on restricting/deactivating the transmission of information/advertising can be found at https://adssettings.google.com/authenticated.

V. Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR. You therefore have the following rights vis-à-vis us, i.e. vis-à-vis the controller:

Right to information

As a data subject, you have the right to request confirmation from the controller as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data (Art. 15 GDPR). You can request the following information:

a. the purposes for which the personal data are processed;

b. the categories of personal data that are processed;

c. the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

d. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

e. the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by the controller or a right to object to such processing;

f. the existence of a right of appeal to a supervisory authority;

g. if the personal data are not collected from the data subject, all available information about the origin of the data;

h. the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Furthermore, you have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

Right to rectification

As a data subject, you have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement (Art. 16 GDPR).

Right to erasure

As the data subject, you have the right to obtain from the controller the erasure of personal data concerning you without undue delay where one of the following grounds applies:

a. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

b. The data subject withdraws consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing.

c. The data subject objects to the processing pursuant to Art. 21 (1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2).

d. The personal data has been processed unlawfully.

e. The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.

f. The personal data was collected in relation to information society services offered in accordance with Art. 8 para. 1.

If the controller has made the personal data concerning you public and is obliged to erase it for the aforementioned reasons, it shall take reasonable steps, including technical measures, taking into account the available technology and the cost of implementation, to inform controllers which are processing the personal data that a data subject has requested the erasure by such controllers of any links to, or copy or replication of, that personal data.

This right to erasure does not apply if the processing is necessary

a. to exercise the right to freedom of expression and information;

b. for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

c. for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3);

d. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89

paragraph 1, insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing, or

e. for the assertion, exercise or defense of legal claims.

Right to restriction of processing

You have the right to obtain from the controller restriction of processing where one of the following applies:

a. the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,

b. the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;

c. the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims, or

d. the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If you have obtained the restriction of processing, you will be informed by the controller before the restriction is lifted.

Right of objection

As the data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.

The controller shall no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.

If the controller processes personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising. If you object to the controller to the processing for direct marketing purposes, the controller will no longer process the personal data for these purposes.

If you would like to exercise your right to object, simply send a message to our data protection officer (see Section II for contact details).

Furthermore, in connection with the use of information society services - notwithstanding Directive 2002/58/EC - you have the option of exercising your right to object by means of automated procedures using technical specifications.

Right to withdraw consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed about these recipients by the controller.

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where

a. the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b) and

b. the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

You do not have the right to data portability if the processing of the data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

This does not apply if the decision

a. is necessary for the conclusion or performance of a contract between the data subject and the controller,

b. is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests; or

c. with your express consent.

In the cases referred to in (a.) and (b.) above, the data controller shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

Right of appeal

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.

The supervisory authority with which the complaint has been lodged will inform you as the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

VI Data security

We use technical and organizational measures to ensure that your personal data is protected as completely as possible. Nevertheless, Internet-based data transmissions can generally have security gaps, so that no one can guarantee absolute protection. For this reason, you are free to transmit personal data to us by alternative means, for example by post, fax or telephone.