With this privacy policy, we would like to inform you about the type, scope and purpose of the processing of personal data (hereinafter also referred to as “data”). Personal data is all data that has a personal reference to you, eg name, address, email address or your user behavior. This privacy policy applies to all data processing operations carried out by us, both in the context of our core activities and for the online media we maintain.

Processing of your data in the context of the services we provide

If you are our customer or business partner or are interested in the services of our craft business, the type, scope and purpose of the processing of your data depends on the contractual or pre-contractual relationship between us. In this sense, the data we process includes all data that we request from you or that you provide to us in order to answer your inquiry, make you an offer or process your order. Unless otherwise stated in the further information in this data protection declaration, the processing of your data and its transfer to third parties is limited to the data that is necessary and appropriate to answer your inquiries and/or to fulfill the contract concluded between you and us , to protect our rights and to fulfill legal obligations. We will inform you which data is required for this before or as part of the data collection. If we use third parties to provide our services, the data protection information of the respective third parties applies.

Data affected:

• Inventory data (eg names, addresses)
• Payment data (eg bank details, invoices)
• Contact details (eg email address, telephone number, postal address)
• Contract data (eg subject matter of the contract, duration of the contract)

Affected persons:  interested parties, business and contractual partners

Purpose of processing:  execution of contractual services, communication and answering contact requests, office and organizational procedures

Legal basis:  Contractual performance and pre-contractual inquiries, Art. 6 Para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Your rights under the GDPR

According to the GDPR, you are entitled to the following rights, which you can assert at any time with the person responsible named in section 1 of this data protection declaration:

• Right to information:  You have the right to request information from us as to whether and which data we process about you.
• Right to rectification:  You have the right to request the rectification of inaccurate data or the completion of incomplete data.
• Right to erasure:  You have the right to request that your data be erased.
• Right to restriction:  In certain cases, you have the right to request that we only process your data to a limited extent.
• Right to data portability:  You have the right to request that we transmit your data to you or to another controller in a structured, common and machine-readable format.
• Right to complain : You have the right to complain to a supervisory authority. The supervisory authority responsible is the supervisory authority of your usual place of residence, your place of work or our company headquarters.

Right of withdrawal

You have the right to revoke your consent to data processing at any time.

Right of objection

You have the right to object at any time to the processing of your data, which we base on our legitimate interest in accordance with Art. 6 (1) (f) GDPR. If you exercise your right of objection, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling legitimate reasons for data processing outweigh your interests and rights.

Notwithstanding the foregoing, you have the right to object to the processing of your personal data for advertising and data analysis purposes at any time.

Please send your objection to the contact address of the person responsible given above.

When do we delete your data?

We delete your data when we no longer need it or when you instruct us to do so. This means that, unless otherwise specified in the individual data protection notices of this privacy policy, we will delete your data:

• when the purpose of the data processing has ceased and thus the respective legal basis mentioned in the individual data protection notices no longer exists, for example:
  • after the termination of the contractual or membership relationships between us (Art. 6 para. 1 lit. a GDPR) or
  • after our legitimate interest in further processing or storing your data no longer applies (Art. 6 para. 1 lit. f GDPR),
• when you exercise your right of withdrawal and no other legal basis for processing within the meaning of Art. 6 para. 1 lit. b-f GDPR applies,
• when you exercise your right to object and there are no overriding legitimate grounds against the deletion.

However, if we still need to retain (certain parts of) your data for other purposes, such as compliance with tax retention periods (generally 6 years for business correspondence or 10 years for accounting records) or for the assertion, exercise, or defense of legal claims arising from contractual relationships (up to four years), or if the data is needed to protect the rights of another natural or legal person, we will delete (the part of) your data only after these periods have expired. Until these periods expire, we will restrict the processing of this data to these purposes (fulfillment of retention obligations).

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are stored on the device you are using. Cookies primarily serve to exchange information between the device you are using and our website. This includes, among other things, the language settings on a website, the login status, or the point at which a video was watched.

When visiting our websites, two types of cookies are used:

• Temporary cookies (Session Cookies): These store a so-called session ID, which allows various requests from your browser to be assigned to the same session. The session cookies are deleted when you log out or close your browser.
• Permanent cookies: Permanent cookies remain stored even after you close the browser. This allows our website to recognize your device when you return to our website. For example, information about language settings or login information is stored in these cookies. Additionally, your browsing behavior can be documented and stored in these cookies. This data can be used for statistical, marketing, and personalization purposes.

In addition to the above classification, cookies can also be distinguished based on their purpose:

• Necessary cookies: These are cookies that are absolutely essential for the operation of our website, such as storing logins or shopping carts for the duration of your session, or cookies that are set for security reasons.
• Statistics, marketing, and personalization cookies: These are cookies used for analysis purposes or reach measurement. Such “tracking” cookies may store information about entered search terms or the frequency of page views. In addition, the browsing behavior of an individual user (e.g., viewing certain content, using functions, etc.) can be stored in a user profile. Such profiles are used to display content to users that correspond to their potential interests. If we use services that store cookies on your device for statistical, marketing, and personalization purposes, we will inform you separately in the following sections of our privacy policy or as part of obtaining your consent.

Affected data:

• Usage data (e.g., access times, clicked websites)
• Communication data (e.g., information about the device used, IP address)

Affected persons: Users of our online services

Purpose of processing: Displaying our websites, ensuring the operation of our websites, improving our online offerings, communication, and marketing

Legal basis:
Legitimate interest, Art. 6 para. 1 lit. f GDPR
If we do not obtain your consent for setting cookies, we base the processing of your data on our legitimate interest in improving the quality and user-friendliness of our online presence, particularly its content and functions. You have the option to object to the use of cookies set by us under our legitimate interest through the security settings of your browser. There you can specify whether you want to accept cookies either not at all, only upon request, or automatically delete them after each browser session. If cookies are disabled for our website, some of the website’s functions may no longer be fully usable.

Security measures

Furthermore, we take technical and organizational security measures in accordance with the state of the art in order to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties.

Current status and changes to this privacy policy

This privacy policy is currently valid and is dated August 2024. Due to changes in legal or official requirements, it may become necessary to adapt this privacy policy.

This privacy policy was created with the help of the data protection generator of SOS Recht. SOS Recht is an offer from Mueller.legal Rechtsanwälte Partnership based in Berlin.