We appreciate your interest in our website. The protection of your privacy is very important to us. portagon GmbH attaches great importance to the protection and confidentiality of your data. The collection and processing of your personal data is carried out exclusively within the framework of the legal provisions, in particular the EU General Data Protection Regulation (DS-GVO), Federal Data Protection Act (BDSG) and other national data protection laws of the member states as well as other data protection regulations.
Baseler Str. 10
60329 Frankfurt am Main
Tel: +49 (0) 69 / 2547 413 0
Fax: +49 (0) 69 / 2547 413 90
Managing Directors: Jamal El Mallouki, Johannes Laub
Contact details of the data protection officer
Dr. Jörg Buschbaum
Personal data is individual information about personal or factual circumstances of a specific or identifiable natural person. This includes, for example, your name, address, date of birth, user name, password, e-mail address and payment data. We describe below how we process your personal data.
Provision of the website and creation of log files
You can visit our website at any time without having to register or provide any personal information. However, each time you call up our website, our system automatically collects data and information from the computer system of the calling computer.
Description and scope of data processing: The following data is automatically collected when a page is called up:
- Browser type and version,
- operating system used,
- Website from which you visit us (referrer URL),
- Website you are visiting,
- date and time of your access,
- your Internet Protocol (IP) address.
The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website.
Legal basis for data processing: The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DS-GVO.
Purpose of data processing: The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. The purpose of the storage in log files is to ensure the functionality and stability of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes are also our legitimate interest in data processing according to Art. 6 Para. 1 lit. f DS-GVO.
Duration of storage: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The data stored in log files are deleted after a period of three days at the latest.
Contact form and e-mail contact
The provision of personal data by you is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide us with personal data. Failure to provide personal data, insofar as this is mandatory, means that it is not possible to contact you via the contact form.
Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored.
Your data will not be passed on to third parties.
Legal basis for data processing: The legal basis for the processing of data transmitted via the contact form is your consent (Art. 6 para. 1 lit. a DS-GVO). The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f DS-GVO. Our legitimate interest is to respond to the contact request of the sender. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DS-GVO.
Purpose of data processing: The processing of personal data from the input mask or an e-mail serves us solely to process the contact request.
Duration of storage: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified. This does not apply if the deletion conflicts with legal or contractual obligations, in particular retention periods.
Participation in the partner program
Description and scope of data processing: We offer the possibility to register for our partner program via our website. The data requested via the registration mask is transmitted to us and processed by us. At the time of registration, the system automatically collects and stores the date and time of your registration in order to document the confirmation of the inclusion of the portagon terms and conditions in the partner agreement.
In the context and further course of the partner program, the following data of you will also be processed:
- Bank details
- Partner status
- Date of completed trainings of portagon
- Number of mediated contacts, details of mediated contacts (names, contact details of potential customers, additional information material provided)
- Commissions paid out, outstanding commission claims.
Legal basis for data processing: The processing of data within the scope of registration and within the scope of an existing partner contract is necessary for the establishment and implementation of the partner contract between you and portagon. The legal basis for data processing is thus Art. 6 para. 1 p. 2 lit. b DS-GVO. We also process the system-side data relating to your registration on the basis of Art. 6 para. 1 p. 1 lit. f DS-GVO. Our legitimate interest lies in maintaining the functionality and security of the website and our IT systems.
Purpose of data processing: Data processing serves to establish and implement the partner contract between you and us as well as – in relation to the data automatically collected by the system – the security and functionality of the website and our IT systems.
Duration of storage: If a partner contract is not concluded after registration, we delete the data collected from you via the registration mask within six months after the rejection of the conclusion of the partner contract. If a partner contract exists, the data will be stored for as long as is necessary for the establishment, implementation and processing of the partner contract, i.e. in any case for the duration of the existence of the partner contract. After termination of the partner agreement, the data will be deleted, unless the deletion conflicts with statutory retention obligations, for example from the German Commercial Code and the German Fiscal Code. These legal obligations provide for a retention period of six or ten years.
To portagon after referral by a partner
Description and scope of data processing: We receive contact data from interested parties and potential customers from partners. Depending on what data you have provided to a partner as an interested party/potential customer, this includes:
- Name of your company
- Contact details (name, e-mail address, telephone number, company address)
- Amount of capital required
- Planned use of the capital
- Partner’s assessment of the prospect’s/potential customer’s understanding of crowdinvesting
- Confirmation of the execution of a demo/on-site appointment
- Name of the referring partner
- Signed consent form for data processing.
Legal basis for data processing: You have consented to the described data processing and contacting of the mediating partner by signing a corresponding declaration from us. The legal basis is therefore Art. 6 para. 1 p. 1 lit. a DS-GVO. If the contact also serves to establish a contract between you and us and the corresponding pre-contractual measures, Art. 6 para. 1 p. 1 lit. b DS-GVO is the additional legal basis for data processing.
Purpose of data processing: The purpose of data processing is to fulfill your request for information about portagon’s offers and services and for a possible use of our services.
Duration of storage: We store your data until you revoke your consent to be contacted by portagon. In case of revocation, we will provide your contact data with a block in case you no longer wish to be contacted by us. If a contract between you and portagon is not concluded and we have not contacted you for more than one and a half years, we will delete your data.
Legal basis for data processing: the legal basis for the processing of personal data is the implementation of pre-contractual measures for the purpose of establishing an employment relationship and, insofar as an employment relationship is established between you and us, the establishment and implementation of the same in accordance with Article 6 (1) lit. b DS-GVO. In the case of a notification of the special categories of data based on voluntary consent, their processing is carried out on the basis of Art. 9 (2) lit. a DS-GVO.
Purpose of data processing: The processing of personal data serves to carry out the application process as well as personnel selection and, if an employment relationship is established between you and us, the establishment and implementation of the employment relationship.
Duration of storage: If we unfortunately have to reject your application, we will delete the data no later than six months after the rejection. If an employment relationship is established, we store personal data at least for the duration of the existence of this employment relationship and, if applicable, any statutory retention periods that go beyond this (e.g. from the Working Hours Act) or contractual retention provisions (e.g. in the case of use of a company pension scheme by way of deferred compensation for the duration of the benefits being drawn). Data no longer required for the fulfillment of the respective purpose will be deleted immediately.
Inclusion in the Talent Pool: If no suitable position can be offered to you at the time of your application, it is possible that the data you provided and transmitted during the application process may be collected, processed and used in the Talent Pool even after its completion. This is done in order to contact you for professional purposes and for possible consideration in a subsequent job assignment. This use requires your express declaration of consent.
Duration of data storage in the Talent Pool: If you expressly wish to be included in our Talent Pool, we will store your data until you revoke your consent, but for no longer than 12 months. After expiration of the term, your data will be deleted automatically and without separate notification.
Use of technically necessary cookies
Description and scope of data processing: In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device.
You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited. The following links show you how to adjust the settings in the following popular browsers:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Legal basis for data processing: If personal data is processed using cookies, the legal basis is Art. 6 (1) lit. f DS-GVO.
The user data collected by cookies are not used to create user profiles.
Duration of storage: So-called. Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser. Persistent cookies are deleted automatically after a specified duration, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
Consent to the use of technically unnecessary cookies.
Our website uses ConsentManager technology to obtain your consent to the storage of certain cookies on your terminal device or to the use of certain technologies and to document this in accordance with data protection law. The provider of this technology is Jaohawi AB, Håltegelvägen 1b, 72348 Västerås, Sweden, website: https://www.consentmanager.de (hereinafter “ConsentManager”).
When you enter our website, a connection is made to ConsentManager’s servers to obtain your consents and other statements regarding cookie use. Subsequently, ConsentManager stores a cookie in your browser in order to be able to assign the consents granted to you or their revocation. The data collected in this way is stored until you request us to delete it, delete the ConsentManager provider cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.
Use of Google Analytics
Description and scope of data processing: If you have given us your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”), on our website. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze the activities of a user across devices. Google Analytics uses so-called cookies, text files that are stored on your computer and enable an analysis of your use of the website. This includes the following cookies in detail:
|name||provider||purpose||duration of function|
|_ga||Contains a randomly generated user ID to associate website usage data with returning visitors and to merge data from previous visits||2 years|
|_gat||Preventing data transmissions during the functional period||1 day|
|_gid||Contains a randomly generated user ID to associate website usage data with returning visitors and to merge data from previous visits||1 day|
The information generated by the cookies, for example time, place and frequency of your website visit including your IP address, will be transmitted to and stored by Google. Since this website uses Google Analytics with the extension “_gat._anonymizeIp”, your IP address will be truncated by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser within the scope of Google Analytics will, according to its own information, not be merged with other data from Google. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.
Legal basis for data processing: The legal basis for the use of Google Analytics is your consent (Art. 6 para. 1 lit. a DS-GVO).
Purpose of data processing: The purpose of data processing is to analyze the behavior of our users anonymously and to improve our website on the basis of these findings.
Use of Google Dynamic Remarketing
Description and scope of data processing: assuming your consent, we use Google’s remarketing function on our website. The application is used to analyze the behavior and interests of our website visitors in order to display targeted interest-based advertisements. Google places cookies for this purpose, which make it possible to recognize visitors to a website when they visit websites that belong to Google’s advertising network. On these websites, users can then be shown advertisements that relate to content that users have previously accessed on websites that use Google’s remarketing function.
Google uses the following cookies for this purpose:
|name||provider||purpose||duration of function|
|IDE||Google (DoubleClick)||Contains a randomly generated user ID to recognize visitors across different websites and play individualized ads||1 year|
|test_cookie||Google (DoubleClick)||Test whether the user’s browser allows cookies to be set.t||15 minutes|
|ads/ga-audiences||Google (AdWords)||Used to re-engage visitors who might switch to the client website based on their online behavior||Session|
You have the option of deactivating the display of individualized ads from Google via the settings of your device. Instructions on how to do this can be found at https://support.google.com/ads/answer/1660762#mob. Further information on data protection in connection with individualized ads can be found at https://support.google.com/adspolicy/answer/143465.
Legal basis for data processing: The legal basis for the use of Google Analytics is your consent (Art. 6 (1) lit. a DS-GVO).
Purpose of data processing: The purpose of data processing is to play out advertisements to visitors to our website in an interest-related and targeted manner.
Duration of storage: 14 months
Use of HubSpot
Description and scope of data processing: We use a customer relationship management system from HubSpot Germany GmbH (c/o Design Offices, Koppenstraße 93, 10243 Berlin, Germany, hereinafter “HubSpot”) on our website.
|name||provider||purpose||duration of function|
|_hstc||HubSpot||Contains the domain, the user token, the timestamps of the first, last and current visit, the current session count||13 months|
|hupspotutk||HubSpot||Capture of user identity when using web forms for de-duplication of contacts||13 months|
|_hssc||HubSpot||Tracks sessions and contains the domain, number of page views in a session, and session start timestamps; thus used to determine if the session number and timestamps in the _hstc cookie need to be increased||30 minutes|
|_hssrc||HubSpot||Determination of the restart of browser sessions||Session|
|_ptq.gif||HubSpot||Capture the devices and marketing channels used by users||Session|
The information generated by these cookies and web beacons, for example time, place and frequency of your website visit including your IP address and the pages viewed, is transmitted to HubSpot Inc. (25 First Street, 2nd Floor, Cambridge, MA 02141, USA) and stored there. HubSpot also reserves the right to transfer data to other HubSpot group companies.
Furthermore, HubSpot collects the data you enter when you fill out forms to request information and coordinate appointments (except when you use the contact form and e-mail contact mentioned above) or when you agree to e-mail marketing communications (newsletters as well as automated mailings, e.g. to provide downloads).
HubSpot will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for us and providing other services relating to website activity and internet usage. HubSpot may also transfer this information to third parties where required to do so by law, or where such third parties process the information on HubSpot’s behalf.
The companies of the HubSpot Group have submitted to the standard contractual clauses.
If you generally do not want HubSpot to collect your data, you can prevent the storage of cookies at any time by changing your browser settings accordingly.
Purpose of data processing: The purpose of data processing is to improve our web offering and to provide users with targeted information via email marketing communications.
Duration of storage: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from forms and those sent by e-mail as part of e-mail marketing communications, this is the case when the respective conversation with you has ended. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been conclusively clarified or the user’s subscription is deactivated. This does not apply if the deletion conflicts with legal or contractual obligations, in particular retention periods.
Use of Demodesk
Scope of the processing of personal data
The following personal data will be processed by Demodesk:
- Desired date
- E-mail address
- Telephone number
- Contract billing and payment data
- Technical data (session URL, screen resolution, etc.)
- Sound and video transmissions
- Personal calendar data (e.g. data on the respective host and guest)
Further information on the processing of data by Demodesk can be found here: https://demodesk.com/legal/privacy-policy.
The provision of your personal data is voluntary. If you do not provide us with the data marked as mandatory, we will not be able to offer you the above-mentioned services and, in particular, we will not be able to conduct video conferences via the tool. If you prefer not to make appointments with us via Demodesk, you can alternatively contact us by e-mail or telephone.
Purposes of the data processing
The use of Demodesk serves us to let prospective and existing customers book an appointment online for a presentation of our product and to subsequently conduct such a product demo via video conference.
Legal basis for the processing of personal data
The legal basis for the data processing is Art. 6 para.1 p.1 lit. f DSGVO. Our legitimate interest here lies in the purposes of data processing mentioned under 2. If a contract is concluded with you, the legal basis for processing your data is Art. 6 para. 1 p. 1 lit. b DSGVO.
Duration of storage
If you do not conclude a contract with us, we will store your data for a maximum of 6 months after the agreed date. If a contract is concluded with you, we store your data for the duration of the contractual relationship.
Use of the Meta Pixel (formerly Facebook Pixel)
We use the service Meta Pixel (Facebook Pixel) on our website.
The legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO (consent).
If you are logged in to Facebook, you can change your settings for advertisements yourself at https://de-de.facebook.com/ads/settings.
If you are not a Facebook user, you can basically manage your usage-based online advertising at http://www.youronlinechoices.com/de/praferenzmanagement/. There you have the option to deactivate or activate providers.
Joint responsibility: We are jointly responsible with Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook) for the collection and transfer of data as part of this process.
The contact details of the company, as well as Facebook’s data protection officer, are available here: https://www.facebook.com/about/privacy. Our contact details can be found at the following link: https://www.portagon.com/impressum/
You may exercise your data subject rights with respect to both Facebook and us.
More information, in particular how Facebook processes personal data, including its legal basis and further information on data subject rights can be found here: https://www.facebook.com/about/privacy. We transfer the data within the scope of shared responsibility on the basis of legitimate interest pursuant to Art. 6 (1) f DSGVO.
Information on data security conditions is located here: https://www.facebook.com/legal/terms/data_security_terms and on processing operations based on standard contractual clauses is located here: https://www.facebook.com/legal/EU_data_transfer_addendum.
We disclose the collected data for processing to the respective internal bodies as well as to other affiliated companies or to external service providers according to the necessary purposes (to perform ad playout and analysis). Platform/hosting service providers receive access to personal data from a third country (countries outside the European Economic Area). So-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded with these service providers as suitable guarantees. Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de.
Deactivation of the meta pixel function is possible at https://www.portagon.com/#cmpscreen and for logged-in users at https://www.facebook.com/settings/?tab=ads#. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
Lifetime of cookies: up to 180 days after the last interaction (this only applies to cookies set via this website).
Use of the Google Tag Manager
The Google Tag Manager is used on this website. The Google Tag Manager is a system from Google that manages Java Script tags and HTML tags used to implement the above-mentioned services. In particular, the system controls which tags are to be executed and when, based on the consent you have given. The Tag Manager does not set any cookies itself and does not collect any data or other information from you and your terminal device. The services it controls set the cookies listed above.
Use of the tracking tool Smartlook
This site uses the tracking tool Smartlook of Smartsupp.com, s.r.o. Lidicka 20, Brno, 602 00, Czech Republic (“Smartlook”) to record randomly selected individual visits with anonymized IP address only. This tracking tool allows using cookies to evaluate in which way you use the website (e.g. which content is clicked on). For this purpose, a usage profile is displayed visually. Only usage profiles are created when using pseudonyms. The legal basis for the processing of your data is your declared consent (Art. 6 para. 1 p. 1 lit. a DSGVO).
You can revoke your consent at any time with effect for the future via the cookie settings. Further information on data protection at Smartlook can be found at https://www.smartlook.com/help/privacy-statement/.
You can deactivate the collection by Smartlook under the following link: https://www.smartlook.com/de/opt-out
Use of the newsletter dispatch tool SendinBlue
This website uses SendinBlue to send newsletters. The provider is SendinBlue SAS, 55 rue d’Amsterdam, 75008 Paris, France. SendinBlue is a service that organizes and analyzes the sending of newsletters. The data you enter for the purpose of receiving newsletters (e.g. e-mail address) is stored on SendinBlue’s servers.
Our newsletters sent with SendinBlue allow us to analyze the behavior of newsletter recipients. Among other things, we can analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. All links in the email are so-called tracking links, with which your clicks can be counted.
If you do not want any analysis by SendinBlue, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Furthermore, you can also revoke your consent at any time with effect for the future by sending an e-mail to the address given in our imprint.
The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of SendinBlue after you unsubscribe from the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for the member area) remains unaffected by this.
Our Facebook pages
If you use our Facebook page, Facebook Inc., Menlo Park, USA (“Facebook”), collects, processes and uses personal data regardless of whether you are a member of Facebook or not for profiling purposes. Furthermore, Facebook provides us with evaluations of the use of our Facebook page in anonymized form. This includes in particular the following evaluations:
Overview: “Likes” for the page: the total number and new “Likes” for the Facebook page; post reach: the total number of individual people who have seen the Facebook page and the posts contained on it; interaction: the total number of individual people who have interacted with the Facebook page, broken down by interaction type.
“Likes”: “Likes” for the page: The total number of “likes” for each individual day, for a period of 28 days; “”Likes (net)”: The number of new “likes” after subtracting the removed “likes”; the location where the “likes” for the Facebook page were made: This shows how many times the Facebook page was “Liked”, broken down by the origin of the “Like”.
Reach: Post reach: The number of people for whom a post was provided, broken down by paid and organic reach; “Like” mentions, comments, and shared content; Hidden posts, reported as spam, “Disliked”: The negative interactions that reduce the number of people reached; Total reach: The number of people who were shown an action from the Facebook page.
Visits: page and tab views: Indicates how often each tab of a Facebook page was viewed; External referrals: Indicates how often people arrived at the Facebook page from a website outside of Facebook.
Posts: When Facebook page fans are online: Shows when people who like the Facebook page are on Facebook; Post Types: Shows the success of each post type based on average reach and interaction; Most Popular Posts from Pages We Keep Track Of: Displays interactions to posts from the pages we keep an eye on.
Video: Video views: How many times the videos on the Facebook page were viewed for more than 3 seconds; 30-second views: How many times the videos on the Facebook page were viewed more than 30 seconds. If the video is shorter than 30 seconds, the people who viewed the video 97% of the time are counted; Top videos: The most viewed videos on the Facebook page for at least 3 seconds.
People: Fans of the Facebook page: displays information about the people who like the Facebook page: gender, age, location and language; Reached people: Displays the people for whom a post was made in the last 28 days; Interacting people: Shows the people (anonymized) in the last 28 days who have “liked,” commented, or shared posts, or interacted on the Facebook page.
When you visit our Facebook page, we are jointly responsible with Facebook for the data processing operations triggered during that visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against Facebook. We have concluded an agreement with Facebook on joint responsibility for the processing of data (Controller Addendum). This agreement specifies the data processing operations for which we or Facebook are responsible when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads.
For information about what information Facebook collects from you, please see Facebook’s Data Policy, specifically the section titled “What Types of Information Do We Collect?” https://www.facebook.com/privacy/explanation.
For more information, please visit https://www.facebook.com/business/a/page/page-insights.
Transmission of personal data
portagon GmbH will not disclose your data to third parties unless you have previously given your express consent to such disclosure or the disclosure is required or permitted by law. Exceptions to this are the service partners of portagon GmbH who are required to process the contractual relationship and who have been commissioned by us to process personal data in accordance with our instructions within the framework of a contract processing agreement. portagon GmbH will neither sell your data to third parties nor otherwise pass it on to third parties for advertising purposes. The employees of portagon GmbH are bound to secrecy and to compliance with data protection regulations.
Automated decision making including profiling
No automated decision-making including profiling takes place.
Rights of the data subject
If personal data is processed by you, you are a data subject within the meaning of the DS-GVO and you are entitled to the following rights vis-à-vis the controller:
Right to information: in accordance with Art. 15 DS-GVO, you have the right to request information about your personal data processed by us; in particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its use. Request meaningful information about its details.
Right to rectification: Pursuant to Art. 16 DS-GVO, you have the right to request the correction of incorrect or completion of your personal data stored by us without undue delay.
Right to erasure: Pursuant to Art. 17 DS-GVO, you have the right to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.
Right to restriction: Pursuant to Art. 18 DS-GVO, you have the right to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DS-GVO.
Right to data portability: Pursuant to Art. 20 DS-GVO, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.
Right to complain: Pursuant to Art. 77 DS-GVO, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose. In the present case, the competent supervisory authority is: The Hessian Data Protection Commissioner.
Right of objection: you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(f) of the DS-GVO.
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing.
Right of revocation: you have the right to revoke any consent you have given for the processing of your personal data at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can send a revocation to the e-mail address provided during registration/ordering or also in any case to firstname.lastname@example.org or by post using the address given above.
Security during data transmission
Within the website visit, we use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. As soon as the encryption is activated, the address bar of the browser turns green.
We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments. All our employees who may come into contact with personal data are obligated in writing to comply with data protection regulations and have been instructed about the legal requirements.
Changes to our data protection declaration
We reserve the right to amend this data protection declaration from time to time so that it always complies with current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. When you visit our website again, the current data protection declaration will apply in each case.
Status: August 2021