Data protection declaration
This data protection declaration applies to the use of the website www.twentyzen.com and is provided by twentyZEN GmbH.
Our handling of the subject of data protection
Data protection law is part of our personal rights. Especially in our constantly developing and networked world, the importance of these rights must not be underestimated. I attach great importance to data protection law in all its forms and requirements, which is why we take the protection of your data very seriously and always endeavour to provide an appropriate level of protection on our website, www.twentyzen.com.
You are free to use the website without providing any personal data. However, if you wish to make use of one of the services (e.g. the request for products) via this website, it may be necessary to collect and process your data. If this is the case and there is no legal basis for this processing, we will always obtain your consent for the respective process.
The processing of your personal data, such as your name, address, e-mail address or telephone number, is always carried out in accordance with the EU General Data Protection Regulation and in accordance with the applicable country-specific data protection regulations. We would like to inform you and also the public about the type, scope and purpose of the personal data collected, used and processed by us in an understandable manner so that comprehensive information on the subject of data protection is provided.
As the data controller, we have implemented numerous technical and organisational measures to ensure the most complete possible protection of personal data processed via this website. Since, despite all technical precautions, absolute protection cannot be completely guaranteed during data transmission, you are free to transmit your personal data by other means, for example by telephone.
Data protection details
1. Definitions according to EU-GDPR
We use the following terms, among others, in this data protection declaration:
a) personal data
Personal data are all information relating to an identified or identifiable natural person (hereinafter “data subject”). Identifiable is a natural person who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
(b) person concerned
Data subject is any identified or identifiable natural person whose personal data are processed by the controller. In case of doubt, you are a person affected.
Processing means any operation or series of operations carried out with or without the aid of automated procedures in relation to personal data, such as the collection, collection, organisation, sorting, storage, adaptation or alteration, reading, retrieval, use, disclosure by transmission, dissemination or any other form of provision, comparison or linking, restriction, erasure or destruction.
d) Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.
(e) Data controller or controller
The data controller or controller is the natural or legal person, public authority, institution or other body which alone or jointly with others decides on the purposes and means of processing personal data. Where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the controller or the specific criteria for his appointment may be laid down in accordance with Union law or the law of the Member States.
Recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, authorities which may receive personal data under Union law or the law of the Member States within the framework of a particular investigation mandate shall not be regarded as recipients.
(g) third parties
A third party is a natural or legal person, authority, institution or other body other than the data subject, the data processor, the data processor and the persons authorised to process the personal data under the direct responsibility of the data processor or the data processor.
Consent shall mean any informed and unequivocal expression of will voluntarily given by the data subject in the particular case in the form of a declaration or other clear affirmative act by which the data subject indicates his or her consent to the processing of personal data concerning him or her.
2. Name and address of the controller
is the person responsible within the meaning of the EU General Data Protection Regulation , other data protection laws in force in the Member States of the European Union and other provisions of a data protection nature:
Phone: +49 351 79 99 – 50 10
twentyZEN GmbH is represented by its managing directors Stefan Machleidt and Dirk Spannaus.
3. Collection of general data and information
The website collects a number of general data and information when you visit the website. This general data and information is stored in the log files of the server. This includes:
(1) used browser types and versions,
(2) the operating system used by the accessing system,
(3) the website from which an accessing system reaches our website (so-called referrer),
(4) the subwebsites, which are accessed via an accessing system on our website,
(5) the date and time of access to the Website,
(6) an Internet Protocol (IP) address,
(7) the Internet service provider of the accessing system and
(8) other similar data and information used for security purposes in the event of attacks on our information technology systems.
When using this general data and information I do not draw any conclusions about you. Rather, this information is needed to
(1) to deliver the contents of our website correctly,
(2) to optimize the contents of our website as well as the advertising for them,
(3) to ensure the long-term functionality of our information technology systems and the technology of our website, and
(4) to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyber attack.
These anonymously collected data and information are therefore evaluated by us statistically and with the aim of increasing data protection and data security in our company in order ultimately to ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all your personal data.
By means of a cookie, the information and offers on the website can be optimized in your interest. Cookies enable us to recognize you. These are small files that are set when you visit websites. With their help, your Internet browser remembers that you have already visited this website.
The purpose of this recognition is to make it easier for users to use this website. For example, if you use this website, you do not have to re-enter your access data each time you visit the website because this is taken over by the website and the cookie stored on your computer system.
You can prevent the setting of cookies by this website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via your Internet browser or other software programs. This is possible in all common internet browsers. If you deactivate the setting of cookies in the Internet browser used, not all functions of the website may be fully usable.
5. Subscribing to our newsletter
On our website you can subscribe to our company’s newsletter. The personal data transmitted to the person responsible for processing when ordering the newsletter is determined by the input mask we use.
We inform all subscribers at regular intervals by means of a newsletter about offers and innovations of our company. The newsletter can only be received if
(1) a valid e-mail address is stored and
(2) you have registered to receive the newsletter.
For legal reasons, a confirmation e-mail in the double opt-in procedure will be sent to the e-mail address entered for the newsletter dispatch for the first time. This confirmation e-mail serves to check whether the e-mail address has authorized the receipt of the newsletter.
When registering for the newsletter, we also store the IP address assigned by the Internet Service Provider (ISP) at the time of registration, the computer system used and the date and time of registration. The collection of this data is necessary in order to be able to trace any (possible) misuse of your e-mail address at a later point in time and therefore serves our legal protection.
The personal data collected when registering for the newsletter will be used exclusively for sending our newsletter. All subscribers to the newsletter can be informed by e-mail if this is necessary for the operation of the newsletter service or for registration, as could be the case in the event of changes to the newsletter offer or changes in the technical conditions. The personal data collected in the context of the newsletter service will not be passed on to third parties. You can cancel your subscription to our newsletter at any time. The consent to the storage of your personal data, which you have given us for the newsletter dispatch, can be revoked at any time. For the purpose of revoking your consent, you will find a corresponding link in every newsletter. Alternatively, you can also contact our contact person named below directly.
Our newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in e-mails to enable log file recording and analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns to be carried out. On the basis of the embedded pixel-code we can recognize whether and when the newsletter was opened and which links were called up by you from the newsletter.
Such personal data collected via the tracking pixels contained in the newsletters is stored and evaluated by us in order to optimise newsletter dispatch and adapt the content of future newsletters even better to the interests of subscribers. This personal data will not be passed on to third parties. You are entitled at any time to revoke the relevant separate declaration of consent given via the double opt-in procedure.
We rely on the services of Amazon Simple Email Service (SES) to send our newsletter. The service is provided by Amazon Web Services Inc. 410 Terry Avenue, North Seattle, WA 98109, United States. Amazon may use the data made available by us for sending newsletters in pseudonymised form to optimise its own service offers and for statistical purposes. An assignment to a specific recipient is not possible. Amazon will not use the data, according to its own statements, to write to the recipients itself or to pass the data on to third parties. Details can also be found in the provider’s data protection information (https://aws.amazon.com/privacy/?nc1=h_ls).
6. Contact via the website
Due to legal regulations, the website contains information which enables a quick electronic contact to our company and direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address).
If you contact us by e-mail, the personal data transmitted by you will be stored automatically. Such personal data transmitted by you on a voluntary basis will be stored for the purpose of processing or contacting you. This personal data is not passed on to third parties.
7. Deletion and blocking of personal data
Your personal data will only be processed for the period necessary to achieve the storage purpose or if this has been provided for by the European Directive and Regulation Giver or another legislator in laws or regulations to which the controller is subject.
If the storage purpose ceases to apply or if a storage period prescribed by the European Directive and Regulation Giver or another competent legislator expires, the personal data is routinely blocked or deleted in accordance with the statutory provisions.
8. Your rights as a data subject
(a) Right to confirmation
You have the right to request confirmation as to whether your personal data are being processed. If you would like to make use of this right of confirmation, you can contact the data protection contact listed below at any time.
(b) Right to information
You have the right to receive free information about your stored personal data (e.g. the purpose of processing or the categories of data that are processed) and a copy of this information at any time.
You also have a right to know whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you also have the right to obtain information about the appropriate guarantees in connection with the transmission.
If you would like to make use of this right to information, you can contact the data protection contact listed below at any time.
(c) Right to correction
You have the right to immediately request the correction of your incorrect personal data concerning you. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.
If you would like to make use of this right of correction, you can contact the data protection contact listed below at any time.
(d) Right to cancellation (right to be forgotten)
You have the right to request that your personal data concerning you be deleted immediately. We are also obliged to delete personal data immediately if there is a reason which does not justify the processing of the data (e.g. personal data was collected for such purposes or processed in any other way for which they are no longer necessary).
If one of the above-mentioned reasons applies and you wish to have your personal data deleted, you can contact the data protection contact listed below at any time.
If your personal data has been made public and we are obliged to delete it, we will take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform data processors who process your personal data that you have requested us to delete all links to this personal data or copies or replications of this personal data.
(e) Right to limitation of processing
You have the right to request that the processing be restricted if one of the following conditions is met:
- You dispute the accuracy of your personal data for a period of time that enables us to verify the accuracy of your personal data.
- The processing is unlawful, you refuse to delete the personal data and instead demand a restriction on the use of the personal data.
- We no longer need the personal data for the purposes of processing, but you do need it to assert, exercise or defend legal claims.
- You have filed an objection to the processing pursuant to Art. 21 para. 1 EU-GDPR and it is not yet clear whether our justified reasons outweigh your justified reasons.
If one of the above conditions is met and you would like us to restrict your personal data stored with us, you can contact the data protection contact listed below at any time.
We will notify you of any correction or deletion of your personal data or any restriction on processing, unless this proves impossible or involves a disproportionate effort. We will inform you of the recipients if you so request.
(f) Right to data transferability
You have the right to receive the personal information you provide about yourself in a structured, common and machine-readable format.
To assert your right to data transferability, you can contact the data protection contact listed below at any time.
(g) Right of objection
You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data concerning you under Article 6(1)(e) or (f) of the EU-GDPR. This also applies to profiling based on these provisions.
We no longer process personal data unless we can provide evidence of compelling grounds for processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.
If personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.
To exercise your right of objection, you can contact the data protection contact listed below directly.
(h) Right to revoke consent under data protection law
You have the right to revoke your consent to the processing of personal data at any time.
If you would like to revoke your consent, you can contact us at any time at the following address:
01067 Dresden Germany
Phone: +49 351 79 99 – 50 10
9. Data protection regulations on the use and application of Google Analytics (with anonymisation function)
We have integrated the component Google Analytics (with anonymisation function) on our website. Google Analytics is a web analytics service. Web analysis is the collection, collection and evaluation of data on the behaviour of visitors to Internet sites. A web analysis service collects, among other things, data about which website you came from (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used to optimize a website and for cost-benefit analysis of Internet advertising.
The Google Analytics component is operated by Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
We use the addition “_gat._anonymizeIp” for web analysis via Google Analytics. By means of this addition, Google shortens and anonymizes the IP address of your Internet connection when you access our Internet pages from a member state of the European Union or from another state party to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Google uses the data and information collected to evaluate the use of our website, among other things, to compile online reports for us that show the activities on our website and to provide other services in connection with the use of our website.
Google Analytics places a cookie on your information technology system. We have already explained to you above what cookies are. By setting the cookie, Google is enabled to analyse the use of our website. Each time you visit a single page of this website operated by us, on which a Google Analytics component has been integrated, the Internet browser on your information technology system is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data, such as your IP address, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently enable commission statements.
This measure stores personal information, such as access time, the location from which access came and the frequency of your visits to our website. Every time you visit our website, your personal data, including the IP address of your Internet connection used, is transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may disclose personal data collected through the technical process to third parties.
As described above, you can prevent the setting of cookies at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a cookie on your information technology system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
You can also specifically enable/disable the use of Google Analytics for our site.
We use the Facebook Pixel on our site. This is a conversion measurement by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). It allows us to track the actions of users who have seen or clicked on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. However, these data are stored and processed by Facebook. At the same time, Facebook can use this data to define our website visitors as a separate target group for advertising.
We do without an extended comparison with data such as e-mail addresses and transaction data from online shops.
Facebook may also link this information to your Facebook account and use it for its own promotional purposes, in accordance with its own data use policy (https://www.facebook.com/about/privacy/). You can allow Facebook and its partners to serve ads on and off Facebook. A cookie may also be stored on your computer for these purposes. This consent may only be given by users older than 13 years of age. If you are younger, we ask your guardians for advice. Please click here if you wish to revoke your consent: https://www.facebook.com/settings/?tab=ads.
You can also specifically activate/deactivate the use of the Facebook pixel for our page.
On this website we use mautic – an open-source tool for marketing automation. This is an analysis and tracking software for the allocation and storage of usage data (e.g. browser used, last visited page, duration of stay). The software uses this information to individualize our marketing measures and better align them to the interests of each individual user. The software also helps us to better evaluate the success of individual marketing measures.
mautic is hosted by us on our own servers. The data will not be passed on to third parties. We collect and process data with mautic only to the extent that it is necessary to achieve the business goals of twentyZEN GmbH with you.
The way mautic works is expressed through:
(a) E-mail marketing and campaigns
With so-called e-mail marketing, personalised e-mails are sent to you. These are partly based on the usage behaviour on the website www.twentyzen.com, when reading our e-mails and when interacting with the links contained therein. We also send e-mails as part of campaigns.
(b) Landing Pages
Landing pages are special websites that have been defined as targets of advertising campaigns. They usually contain interaction options, e.g. for downloading whitepapers or checklists and forms for collecting information about you.
The software uses various technical procedures to assign individual activities to anonymous profiles or – with prior consent – to the profiles of individual users:
(c) Tracking pixels
To detect whether an e-mail has been opened, for example, mautic uses so-called tracking pixels. This loads a small graphic from the provider’s server that was previously assigned to an individual user profile.
(d) personalized weblinks
For example, to see if a user calls a link from an email, mautic adds a unique identifier to these links that was previously assigned to an individual user profile.
(e) IP address
The IP address currently used by website visitors is transmitted to us each time they visit our website. Mautic uses these to recognize users of the website.
The data collected are:
- the activity on our website
- Number of page views and length of stay of the website visitor
- the click path of the respective visitor
- Downloads of files provided via the website
- Visits to landing pages
- Open emails from newsletters and campaigns
When registering on the website or downloading a white paper, the provider collects information about the use of mautic
- Contact information (such as name, postal or e-mail address, telephone or fax number).
- Business contact information (such as your job title, the name of my business, business e-mail address, telephone or fax number).
- the IP address of the terminal from which the website is being used (a sequence of digits identifying your current computer connection to the Internet)
The requested data are clearly recognizable for the user by filling out a form. The data required to send the form is indicated.
Mautic will not be used until you have expressly consented to the use of first-party cookies when you first use our website. You can revoke this consent at any time to the contact person named above. In this case, all tracking data collected by means of mautic will be deleted immediately.
We have integrated a link to the Facebook Internet service on our website. Facebook is a social network where we can be found and reached.
As a social network, Facebook enables its users to communicate with each other and interact in virtual space. It thus also serves as a platform for the exchange of opinions and reports or enables the Internet community to provide personal or company-related information. Facebook gives its users the opportunity to create private profiles, download photos to the network or network with friends, customers or business partners via friendship requests. In addition, company profiles can also be presented via the social network.
Facebook is operated by Facebook, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. The person responsible for the processing of personal data is, for all persons living outside the USA and Canada, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
We have limited ourselves to linking to our Facebook page. By clicking on the link on our site, you will be automatically redirected to our Facebook page. You will leave our site and go directly to the Facebook page. When you visit our Facebook page, Facebook processes data itself. This will also tell Facebook from which page you moved to the Facebook page.
If you are logged in to Facebook at the same time, Facebook collects data on the page that is assigned to your Facebook account and is stored as personal data with each visit and for the entire duration of the respective stay. If you do not wish to do so, you must log out of Facebook before using our site and delete the cookies from Facebook. You can also make the appropriate settings in the profile settings of your Facebook account at https://www.facebook.com/settings?tab=ads.
We have integrated a link to the Instagram Internet service on our website. Instagram is a platform that allows users to share photos and videos and to share such data on other social networks.
Instagram’s services are operated by Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.
Each time you access one of the individual pages of this website operated by us and on which an Instagram component has been integrated, your Internet browser automatically triggers the respective Instagram component to download a representation of the corresponding component of Instagram. As part of this technical process, Instagram learns which specific subpage of our website you are visiting.
If you are logged in to Instagram at the same time, Instagram recognizes which specific subpage you are visiting with each of your visits to our website and for the entire duration of your stay on our website. This information is collected by the Instagram component and assigned to your Instagram account by Instagram. If you click one of the Instagram buttons integrated on our website, the data and information transferred will be assigned to your personal Instagram user account and stored and processed by Instagram.
Instagram receives information via the Instagram component that you have visited our website whenever you are logged in to Instagram at the same time as you access our website, regardless of whether you click on the Instagram component or not. If you do not want this information to be sent to Instagram, you can prevent it from being sent by logging out of your Instagram account before visiting our website.
In addition, we have integrated components from YouTube on our website. YouTube is an Internet video portal that allows video publishers to post video clips and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes, music videos, trailers or videos produced by users themselves can be called up via the Internet portal.
YouTube is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time you access one of the individual pages of this website, which is operated by us and on which a YouTube component (YouTube video) has been integrated, the Internet browser on your information technology system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. More information about YouTube can be found at https://www.youtube.com/intl/en/yt/about As part of this technical process, YouTube and Google are informed about which specific subpage of our website is visited.
If you are logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website you are visiting by calling up a subpage that contains a YouTube video. This information is collected by YouTube and Google and assigned to your respective YouTube account.
YouTube and Google receive information via the YouTube component that you have visited our website whenever you are logged in to YouTube at the same time as you visit our website, regardless of whether you click on a YouTube video or not. If you do not agree to such a transmission of this information to YouTube and Google, you can prevent the transmission by logging out of your YouTube account before accessing our website.
The data protection regulations published by YouTube, which can be accessed at https://policies.google.com/privacy?hl=en&gl=en, provide information about the collection, processing and use of personal data by YouTube and Google.
17. Data protection regulations on the use and application of Twitter
Our website uses Twitter content and functions. The short message service Twitter is an offer of Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. You as a user can share our texts and images and tell us via the short message service whether you like the content. You can also subscribe to us as the author of the content. If you are a member of the Twitter platform yourself, Twitter can assign calling up the contents and functions of our site to your profile. You can find out how Twitter handles your data on our https://twitter.com/en/privacy website. If you do not want to use the function, you can prohibit this via this opt-out link https://twitter.com/personalization.
XING content and functions can be used on our website. XING is offered by XING SE, Dammtorstraße 21, 20354 Hamburg. For example, texts, pictures and videos can be used to let you know whether you like the content offered. At the same time you can subscribe to the author of the content or his contributions. If you are registered and logged on to the XING platform, XING can assign the calling of contents and functions to your profile. Details can also be found in XING’s data protection declaration (https://www.xing.com/app/share?op=data_protection).
This page uses so-called web fonts to display fonts uniformly. Provider of this service is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you call up the page, your browser loads the required Web fonts into your browser cache to display texts and fonts correctly.
To do this, the browser you are using must connect to Google’s servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-GDPR.
If your browser does not support web fonts, a default font is used by your computer.
To increase our company’s reach, we use Google AdWords. Provider of Google AdWords is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using Google AdWords and the DoubleClick tracking tool, we can better understand your behaviour as a user of our website and target our advertising activities more specifically on specific groups of users. Through the tools it is possible that we can let you after a visit to our website targeted advertising to our products on other pages, which also use GoogleAdwords, or during a search with the search engine of Google. These data are stored by us.
Google works with small files or invisible graphics (so-called web beacons) as part of the advertising network. These web beacons are used to import Google cookies, which Google uses to assign individual users to specific target groups and then – in some cases in real time – to display certain web content “which, with a certain probability, fits the interests of the respective user.
In this context, in addition to information about the visited websites, the contents viewed and clicked on, visiting times and clicked links, information about your operating system and your IP address is also stored. According to Google, the data is processed pseudonymised and only assigned to a specific cookie and not to a specific person.
Details can also be found in the data protection information of Google (https://policies.google.com/technologies/ads) or in the advertising settings of Google Google (https://adssettings.google.com/authenticated).
Google itself is certified according to the Privacy Shield Agreement and guarantees compliance with the German and European data protection standards (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
23. Legal basis of the processing
The legal basis for the processing operations mentioned above is Art. 6 I lit.a EU-GDPR, in which your consent is obtained for a specific processing purpose. If the processing of personal data is necessary, for example due to the fulfilment of a contract with you, this processing is justified by Art. 6 I lit.b EU-GDPR. The same applies to such processing processes that are necessary to carry out pre-contractual measures, for example in cases of enquiries about our services.
In the event of a legal obligation requiring the processing of personal data, for example to fulfil tax obligations, the processing is based on Art. 6 I lit. c EU-GDPR.
It may be necessary to process personal data in order to protect vital interests or the interests of another natural person.
Ultimately, processing operations could be based on Art. 6 I lit. f EU-GDPR. Processing operations which are not covered by any of the aforementioned legal bases are based on this legal basis if processing is necessary to safeguard a legitimate interest of our company or a third party, provided that your interests, fundamental rights and freedoms do not prevail. Such processing procedures are permitted to us in particular because they have been specifically mentioned by the European legislator. This is the case, for example, if you are a customer of our company. (Recital 47, 2nd sentence, EU-GDPR).
24. Our legitimate interest
If the processing of personal data is based on Article 6 I lit. f EU-GDPR, it is in our legitimate interest to conduct our business for the benefit of all our employees, shareholders and customers.
25. Duration of storage
The criterion for the duration of the storage of personal data is the respective legal retention period. After the expiry of this period, the corresponding data will be routinely deleted, provided that it is no longer necessary for the fulfilment or initiation of the contract.
26. Legal or contractual regulations for the provision of personal data
We inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). In addition, in order to conclude a contract, it may be necessary for you to provide us with personal data which must subsequently be processed by us. For example, you are obliged to provide us with personal data if our company enters into a contract with you. Failure to provide personal data would mean that the contract could not be concluded.
You can contact us before providing your personal data. We will then inform you on a case-by-case basis whether the provision of your personal data is required by law or contract or required for the conclusion of the contract, whether there is an obligation to provide the personal data and what consequences the failure to provide the personal data would have.
27. Contact person
If you have any questions about data protection and the handling of your data on our website and our company, please do not hesitate to contact us. Please do not hesitate to contact us if you have any questions regarding data protection:
Phone: +49 351 79 99 – 50 10
Bastanier & Schmelzer
Rechtsanwälte Partnerschaft mbB
(automated translation, the official data privacy statement is the German Version)