As of May 2018
1. Who is responsible for the data processing and to whom can I contact
Responsible in the sense of the basic data protection regulation is:
Rehder / Partner GmbH
Authorized Managing Directors: Jan Rehder, Constance Post
Tel .: +49 (0) 40 881 00 01
Fax .: +49 (0) 40 881 37 68
If you wish to object to the collection, processing or use of your data in accordance with data protection regulations as a whole or for individual measures, you should address your objection to the above-mentioned address or by e-mail to the above-mentioned e-mail address.
2. On which legal basis we process your data
If processing takes place on the basis of your consent, you can withdraw it at any time with effect for the future. You can send your cancellation by post to the above address or by e-mail to the above e-mail address.
If, in the course of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit data to them or otherwise grant access to the data, this is done exclusively on the basis of a legal permission (e.g. if a transmission of the data to third parties, as to payment service providers, pursuant to article 6 (1) (b) GDPR is required to fulfill the contract), you have consented to a legal obligation or based on our legitimate interests (e.g. the use of agents, web hosts, etc. in accordance with article 6 paragraph 1 letter C GDPR).
In the event that we commission third parties to process data, this is done on the basis of article 28 GDPR. (so-called "order processing").
3. What data is processed
The hosting services we use are for the purpose of providing the following services: Infrastructure and platform services, computing capacity, storage and database services, security and technical maintenance services we use to operate this online service. For this purpose, we or our hosting provider process your data in accordance with our legitimate interests in an efficient and secure provision of this online offer.
Collection of access data and log files
We, or our hosting provider, collects on the basis of our legitimate interests within the meaning of article 6 para. 1 lit. f. GDPR Data on every access to the server on which this service is located (so-called server log files). The access data include the date and time of retrieval, name of the retrieved web page, the amount of data transmitted, the message about successful retrieval, the browser type and version, the operating system of the user, the previously visited page (so-called "referrer URL"), the IP address and the requesting provider. Logfile information is stored for a maximum of 7 days and then deleted. Data whose further retention is required for evidential purposes shall be exempted from the cancellation until final clarification of the incident.
Contact (contact form)
When contacting us (for example, by contact form, e-mail, telephone or via social media) the information of the user to process the contact request and its processing in accordance with. article 6 para. 1 lit. b) GDPR in conjunction with the consent you granted in accordance with article 6 para. 1 lit. a) GDPR processed. In addition, we use your data based on our legitimate interests in accordance with. article 6 para. 1 lit. f) GDPR in conjunction with the consent you granted in accordance with article 6 para. 1 lit. a) GDPR to inform you about similar products or services from our product range by post. You can revoke this consent at any time without giving any reason. An informal message by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The following categories of data are processed by us when contacting us, depending on the respective form of contact:
- Contact Form: Your contact details (such as name, address, e-mail address and phone number), the subject and content of your message, the time of your request and your IP address.
- E-Mail: Your e-mail address, the content of your e-mail and the time of the request
- Phone: your name, phone number, the time and reason of your call
We will not share this information without your consent.
The information you provide when you contact us (for example, via our contact form) will remain with us until you ask us to delete it, revoke your consent to storage, or delete the data storage purpose (for example, after your request has been processed). Mandatory statutory provisions - especially retention periods - remain unaffected.
4. How safe is my data
Data provided via the contact form will be encrypted and transmitted for security purposes using the SSL (Secure Socket Layer) method. SSL is a proven encryption system that is used worldwide and that allows your browser to automatically encrypt your data before sending it to us. You can recognize an encrypted connection by changing the address line of the browser from "http://" to "https://" and the lock symbol in your browser line.
5. What rights do I have as an affected person?
You can always
- Get information about the data stored or processed by us
- request rectification or deletion of your data
- require restriction of the processing of your data
- object to the processing of your data
- demand the transferability of your data
- Submit a complaint to the Data Protection Inspectorate. Your competent supervisory authority is that of your place of residence. A list of regulators can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
6. How long will my data be stored?
The data processed by us are deleted or limited in their processing in accordance with articles 17 and 18 GDPR. As soon as the data are no longer required for their intended purpose and the deletion does not conflict with any statutory storage requirements, the data stored with us will be deleted. Unless the data is deleted because it is required for other and legitimate purposes, its processing will be restricted. Than the data is blocked and not processed for other purposes. This applies, for example for data that must be kept for commercial or tax reasons. According to legal requirements in Germany, the storage takes place in particular for 6 years according to § 257 paragraph 1 HGB as well as for 10 years according to § 147 paragraph 1 AO.