PRIVACY POLICY
1. information on the collection of personal data and contact details of the controller 1.1 Thank you for visiting our website. In the following, we would like to inform you about how we handle your personal data when you use our website. Personal data is basically all data with which you can be personally identified. 1.2 The controller in charge of data processing on our website, within the meaning of the General Data Protection Regulation (GDPR), is: Dr.-Ing. Katja Landgraf Slitisa Consulting GmbH Schwarzer Stock 8 36110 Schlitz E-Mail: Katja.landgraf@slitisa.de 1.3 In order to protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL or TSL) via HTTPS.
2. data collection when visiting our website Each time you visit our website, our system automatically collects data and information that your browser transmits to our server (so-called “server log files”).
The following data, which is technically necessary for us, is collected: The website we visited
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Operating system used
- Browser used
- IP address used (if applicable: in anonymized form)
- Device used
- Approximate location.
- Session statistics (demographic characteristics, session duration)
- Saved cookie settings of the user
The legal basis for the processing is Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and maintaining the functionality of our website. The data will not be passed on or used in any other way. Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. We reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or distorted so that it is no longer possible to identify the calling client. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object. 3. contacting us If you contact us via the contact form, the data entered in the input mask will be transmitted to us and stored. The data collected can be found in the respective input mask. When you contact us by e-mail, only the data you enter there will be transmitted to us. The data will be used exclusively for processing the conversation and your request. The legal basis for the processing of the data, if the user has given consent, is Art. 6 para. 1 lit. a) GDPR. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f) GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR. The data will be deleted as soon as it is no longer required for the purpose for which it was collected and provided that there are no statutory retention obligations to the contrary. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The user has the option to revoke their consent to the processing of personal data at any time. If the user contacts us by e-mail, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. 3.1 If you have purchased goods with digital elements or a digital product from us and we owe you updates in accordance with the contract, we will inform you of upcoming updates via a suitable communication channel. For this purpose, we process the data provided by you when ordering (name, address, e-mail address) for a specific purpose and only to the extent necessary. The legal basis for this processing is Art. 6 para. 1 lit. c GDPR, namely the fulfillment of our legal obligation. 4. cookies Our website uses cookies. Cookies are text files that are stored on the user’s end device. When a user accesses a website, a cookie may be stored on the user’s operating system. Some functions of our website cannot be offered without the use of cookies. This requires the browser to be recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. The aforementioned purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f) GDPR. In addition, our website may use cookies that enable an analysis of the surfing behavior of users (so-called third party cookies). Further information on the scope, purpose, legal basis and objection options can be found in the relevant sections of the respective chapter of this privacy policy. You as the user have full control over the use of cookies. You can deactivate, restrict or delete the transmission of cookies by changing the settings in your Internet browser. If you deactivate cookies for our website, you may no longer be able to use all functions of the website to their full extent. You can prevent the transmission of Flash cookies by changing the Flash Player settings. You can find help on the settings in the respective help menu of your browser under the following links: Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647 Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac Opera: https://help.opera.com/en/latest/web-preferences/#cookies Some of the cookies used here are deleted after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. 5. data processing for contract processing In order to conclude a contract with us, it is necessary for you to provide your personal data, which we need to process your contract. We process the data you provide in order to process the contract with you. In some cases, we work together with external service providers. For this purpose, we must pass on the necessary personal data. The legal basis for the transfer of your data is Art. 6 para. 1 lit. b GDPR. 6. use of your data for direct advertising Newsletter for existing customers If you purchase goods or services on our website and enter your e-mail address, we may subsequently use it to send you a newsletter.
In such a case, the newsletter will only be used to send direct advertising for our own similar goods or services.
The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 para.
3 UWG and Art. 6 para. 1 lit. f GDPR.
In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising.
If you have already objected to the use of your email address for the purpose of direct advertising, you will not receive this newsletter.
However, you also have the option of objecting to the use of your email address for the advertising purpose stated here at any time with effect for the future by sending us a message.
Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately. 7. web analysis services Google Analytics 4 We use Google Analytics 4 on our website, a web analysis service of Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) (hereinafter referred to as “GA4”).
Google Analytics uses “cookies”.
These are small text files that are stored on your device and enable your use of the website to be analyzed.
The information generated in this way about your use of this website (including the shortened IP address) is transferred to a Google server and stored and processed there, whereby a transfer to the USA is possible.
The IP addresses are anonymized by default.
For IPv4 addresses, the last octet and for IPv6 addresses the last 80 bits in the memory are set to zero and thus “anonymized”.
A personal reference is excluded.
Transmission to servers of Google LLC based in the USA is not excluded.
During your visit to the website, GA4 records your user behavior in the form of “events”, such as Page views, first visit to the website, start of the session, your “click path”, interaction with the website, scrolls, clicks on external links, internal search queries, interaction with videos, file downloads, ads viewed / clicked on, language setting.
GA4 also records your approximate location (region), your IP address (in anonymized form), technical information about your browser and the end devices you use (e.g. language setting, screen resolution), your internet provider, the referrer URL (via which website/advertising medium you came to this website). Google uses this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. Your anonymized IP address collected in this context will not be merged with other Google data.
The data collected in this context is stored for two months.
The legal basis for the data processing described here and the setting of cookies is your express consent in accordance with Art.
Art. 6 para. 1 lit. a GDPR.
This consent can be revoked at any time with effect for the future, for example by deactivating this Google service via the cookie consent tool in which you have already given your consent.
Without your consent, Google Analytics 4 will not be used during your visit to our website.
You can revoke your consent at any time with effect for the future.
To exercise your right of withdrawal, please deactivate this service using the “cookie consent tool” provided on the website.
Google LLC, based in the USA, is certified for the us-European data protection agreement “EU-U.S. Data Privacy Framework”, which guarantees compliance with the level of data protection applicable in the EU.
We have also concluded an order processing agreement with Google.
Further information on data protection by Google Analytics 4 can be found on the following websites: https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=de&gl=de Demographic characteristics The “demographic characteristics” function of GA4 can generate statistics that can be used to make statements about the age, gender and interests of site visitors.
For this purpose, advertising and information from third-party providers are analyzed and target groups for certain marketing activities are identified.
However, this does not involve any personal allocation of data.
The data is deleted after two months.
UserIDs If we use the extended “UserIDs” function, your activities (including conversions) can be analyzed across devices.
In this case, the analysis is not pseudonymous.
This is possible if you have given your consent to the use of Google Analytics 4 acc.
Art. 6 para. 1 lit. a GDPR, you have set up an account on this website and log in with this account on different devices.
Google Signals If we use the “Google Signals” extension, we can generate cross-device reports on your usage behavior.
However, we only receive statistics and no personal data.
This analysis is only possible if you have activated personalized ads in your Google account and linked your end devices to a Google account.
Likewise, your consent to the use of Google Analytics acc.
Art. 6 para. 1 lit. a GDPR are present.
The cross-device analysis can be prevented by deactivating the “personalized advertising” function in your Google account.
Further information on Google Signals can be found here: https://support.google.com/analytics/answer/7532985?hl=de 8. Tools and other 8.1 Google reCAPTCHA We use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) in accordance with Art. 6 para. 1 lit. f GDPR due to our legitimate interest in preventing misuse and spam. reCAPTCHA is a function designed to ensure that an entry is made by a natural person. The service sends your IP address and any other data required by Google for the reCAPTCHA service to Google. When using Google reCAPTCHA, your personal data may also be transmitted to the servers of Google LLC. in the USA. Google LLC, based in the USA, is certified for the us-European data protection agreement “EU-U.S. Data Privacy Framework”, which guarantees compliance with the level of data protection applicable in the EU.
We have also concluded an order processing agreement with Google.
Further information on data protection by Google can be found on the following websites: https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=de&gl=de 8.2 Google Maps We use “Google Maps” (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is used to display interactive maps and to create directions. By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, may be transmitted to Google. When you access a web page on our website that contains Google Maps, your browser establishes a direct connection with Google’s servers. The map content is transmitted by Google directly to your browser, which integrates it into the website. We therefore have no influence on the scope of the data collected by Google in this way. To the best of our knowledge, this is at least the following data:
- Date and time of the visit to the website in question,
- Internet address or URL of the website accessed,
- IP address, (start) address entered during route planning.
We have no influence on the further processing and use of the data by Google and can therefore accept no responsibility for this. If you are logged in to Google, your data will be assigned directly to your Google account. If you do not want this assignment, you must log out of Google. Google stores your data (including that of users who are not logged in) as usage profiles and analyzes them. Such an evaluation is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your express consent. If you do not want Google to collect, process or use data about you via our website, you can also deactivate JavaScript in your browser settings. In this case, however, you cannot use the map display. The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google’s data protection information (https://policies.google.com/privacy?hl=de). Google LLC, based in the USA, is certified for the us-European data protection agreement “EU-U.S. Data Privacy Framework”, which guarantees compliance with the level of data protection applicable in the EU.
We have also concluded an order processing agreement with Google.
Further information on data protection by Google can be found on the following websites: https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=de&gl=de 9. Rights of the data subject 9.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below: – Right to information in accordance with Art. 15 GDPR: You can request confirmation from the controller as to whether personal data concerning you is being processed by the controller.
In addition, you have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and the existence of further rights such as rectification of the data or the existence of a right of appeal to a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved. meaningful information about the logic involved and the significance and envisaged consequences of such processing for you, as well as your right to be informed of the safeguards pursuant to Art. 46 GDPR relating to the transfer of your data to third countries; – Right to rectification pursuant to Art. 16 GDPR: You have the right to obtain without undue delay the rectification of inaccurate data concerning you and/or the completion of incomplete data stored by us; the rectification or completion must be carried out without undue delay.
– Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse to have your data erased due to unauthorized data processing and instead request the restriction of the processing of your data, if you require your data for the assertion, exercise or defence of legal claims after we no longer require this data after the purpose has been achieved or if you have lodged an objection for reasons relating to your particular situation, as long as it is not yet clear whether our legitimate reasons prevail; Where the processing of personal data concerning you has been restricted, such data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been restricted, you will be informed by the controller before the restriction is lifted. – Right to erasure pursuant to Art. 17 GDPR: You have the right to obtain the erasure of your personal data without undue delay if the requirements of Art. 17 para. 1 GDPR are fulfilled. However, this right to erasure does not exist in particular – not conclusively – if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims – right to be informed in accordance with Art. 19 GDPR: If you have exercised your right to rectification, erasure or restriction of processing, the controller is obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients. – Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to request transmission to another controller, where technically feasible; – Right to withdraw consent pursuant to Art. 7 para.
3 GDPR: You have the right to object at any time to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions. You also have the right to revoke your declaration of consent under data protection law at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. – Right to lodge a complaint pursuant to Art. 77 GDPR: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
9.2 Right to object You have the right to object to the processing of your data at any time with effect for the future if we process your data on the basis of our overriding legitimate interest after weighing up your interests.
If you make use of this right of objection, we will stop processing your data unless there are demonstrably overriding compelling legitimate grounds for termination or if further processing serves the exercise or defense of legal claims. 10. duration of storage of personal data The duration of storage of personal data depends in each case on statutory retention periods. After their expiry, we routinely delete the data if they are no longer required for the fulfillment or initiation of the contract and/or if we no longer have a legitimate interest in further storage.