Your personal data within the meaning of Art. 4 No. 1 GDPR (eg IP address, name, e-mail address and telephone number, payment information) are processed by us only in accordance with the provisions of German data protection law and in consideration of the European General Data Protection Regulation (DSGVO) , The following regulations inform you about the nature, scope and purpose of the collection, processing and use of personal data.
The processing within the meaning of Art. 4 No. 2 GDPR of personal data is legal according to Art. 6 GDPR, if one of the following conditions exists:
(a) the data subject has given his consent to the processing of the personal data concerning him for one or more specific purposes;
(b) the processing is necessary for the performance of a contract to which the data subject is a party or for the performance of any pre-contractual action taken at the request of the data subject;
(c) the processing is necessary to fulfill a legal obligation to which the controller is subject;
(d) the processing is necessary to protect the vital interests of the data subject or any other natural person;
(e) the processing is necessary for the performance of a task which is in the public interest or in the exercise of official authority delegated to the controller;
(f) the processing is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data prevail, in particular where the data subject is a Child acts.
The processing of special personal data (eg health data) within the meaning of Article 9 (1) GDPR is, in particular, lawful under Article 9 (2) of the GDPR if one of the following conditions applies:
– there is an explicit consent of the person;
– the processing is necessary for the assertion, exercise or defense of legal claims or for acts of the courts in the context of their judicial activity.
An automatic decision-making or profiling of personal data within the meaning of Art. 22 DSGVO does not take place.
The operator shall ensure the security of the data in accordance with Art. 32 DSGVO by taking appropriate technical measures, taking into account the proportionality principle.
In the unlikely event of a breach of data protection, the competent supervisory authority will be notified pursuant to Art. 33 DSGVO and the data subject in accordance with Art. 34 DSGVO.
Duration of data storage
The duration of the storage of the data transmitted by them depends on the statutory storage requirements. According to the trade and tax laws, there is a duty to keep invoices for a period of 10 years.
Transfer of data to third parties
A transfer of data transmitted in the context of the contractual relationship to third parties (Article 4 No. 10 GDPR), takes place only if you have expressly declared your consent (Article 4 No. 11 GDPR) or disclosure is required to fulfill the contract. The consent can be withdrawn informally at any time. Data collected by visiting the website are only collected by third parties, which are expressly mentioned below.
Responsible within the meaning of the DSGVO
The person responsible within the meaning of the General Data Protection Regulation (DSGVO), as well as other data protection laws in the European Union and other provisions with data protection character is:
Dr. Alexandra V. Von Tulechov
Z. Malla of Tulechov
Tel. +49 – (0) 89 – 33 88 44