Privacy policy
Name and address of the person responsible
The responsible person within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
Amelie Borges – Project and Event Management
Amelie Borges
Welfenstrasse 8A
81541 Munich
Germany
Phone: +49 151 240 94638
E-mail: mail@amelievollmer.de
Internet: www.amelievollmer.de
I. General information on data processing
1. Scope of the processing of personal data
The controller collects and uses personal data of its users (hereinafter also referred to as „data subject“, „data subject“ or „visitor“) only to the extent necessary to provide a functional website and to present the contents and services. The collection and processing of personal data of users for other purposes is generally only carried out with the consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons, the processing is based on pre-contractual or contractual measures, the processing of the data is permitted by law and/or there is a legitimate interest of the controller in the processing.
2. Legal basis for the processing of personal data.
Insofar as the controller obtains the consent of the data subject for processing operations involving personal data, Article 6 (1) sentence 1 lit. a of the EU General Data Protection Regulation (DSGVO) serves as the legal basis for the processing of personal data. For any transfer to a non-secure third country, the processing is based on Art. 49 (1) p. 1 lit. a DSGVO.
For the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) sentence 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as processing of personal data is necessary for compliance with a legal obligation to which the controller is subject, Article 6 (1) sentence 1 lit. c DSGVO serves as the legal basis.
In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) p. 1 lit. d DSGVO serves as the legal basis.
If the processing is necessary to protect a legitimate interest of the controller or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) p. 1 lit. f DSGVO serves as the legal basis for the processing.
3. Data deletion and duration of storage
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage no longer applies or a given consent is revoked by the data subject or the processing is objected to. Furthermore, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
II. Rights of the data subject
If we process your personal data, you as the data subject have the following rights vis-à-vis us as the data controller:
1. Right to information, Art. 15 DSGVO.
Within the framework of the applicable legal provisions, you have the right to (free) information about your collected and stored personal data at any time. This includes, among other things, information about their processing purposes, their origin and recipients, the storage period and the existence of various rights.
2. Right to rectification, Art. 16 DSGVO.
You have the right to rectification (also in the sense of completion) of your data against the controller, if the processed personal data concerning you are inaccurate or incomplete for the purpose of the processing. The controller shall carry out the rectification without undue delay.
3. Right to erasure, Art. 17 DSGVO
You may request the erasure of your personal data at any time under the conditions of Art. 17 DSGVO, unless circumstances still apply that entitle or oblige the controller to continue to process your personal data (such as statutory retention obligations).
4. Right to restriction of processing, Art. 18 DSGVO.
If the legal requirements are met, you may request restriction of the processing of your personal data within the scope of Art. 18 DSGVO.
5. Right to information, Art. 19 DSGVO.
If your personal data has been processed by recipients to whom the controller has disclosed the data, the controller is obliged to inform them of your requests for rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort. You may request that the controller inform you of these recipients.
6. Right to data portability, Art. 20 DSGVO.
If you have provided us with personal data and automated processing is carried out on the basis of your consent or on the basis of a contract, you have a right to transfer the data you have provided within the scope of Art. 20 DSGVO, provided that this does not affect the rights and freedoms of other persons. The provision shall take place in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
7. Right of objection, Art. 21 DSGVO
You have the right to object to the processing of your data at any time, provided that the processing is carried out on the basis of a balance of interests. This is the case if the controller relies on the public interest or its be-rechtigtes Interesse for processing (see Art. 6 (1) p. 1 lit e and f). The prerequisite is that you assert reasons arising from your particular situation, which outweigh the interest of the controller. The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
Article 21 (2) of the GDPR contains a special, deviating regulation if the personal data concerning you is used for direct marketing. Here, you have the right to object to the processing of the personal data concerning you at any time without further requirements. The personal data concerning you will no longer be processed for the purpose of direct marketing. Insofar as profiling is associated with direct advertising, you can also object to this.
You have the possibility to exercise your right of objection in connection with the use of information society services by means of automated procedures using technical specifications.
8. Automated decision in individual cases, Art. 22 DSGVO
Pursuant to Article 22 of the GDPR, you have the right not to be subject to decisions which produce legal effects vis-à-vis you or similarly affect you based exclusively on automated processing, including profiling. Exceptions may exist if appropriate measures for the protection of your person are ensured and there are necessary contractual provisions, there is a legal provision or you have expressly consented.
9. Right to withdraw your consent, Art. 7(3) DSGVO.
You have the right to revoke your declaration of consent under data protection law at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation. You can send the revocation to the responsible person by e-mail or by post.
10. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority for data protection, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR.
The supervisory authority responsible for us is The Bavarian State Office for Data Protection Supervision. However, if you are in another federal state or not in Germany, you can also contact the data protection authority there.
III. SSL/TLS Encryption
This website uses SSL/TLS encryption for reasons of security and to protect the transmission of confidential content, such as the inquiries that you, as the data subject, send to us as the site operator. An encrypted connection can be recognized by the fact that the address line of the browser changes from „http://“ to „https://“ and by the lock symbol in the browser line. If SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.
IV. External hosting
1. Description and scope of data processing
This website is hosted by an external service provider (so-called hoster). The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, page views and other data generated by a website.
2. Legal basis for data processing
The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f DSGVO for the provision of the website.
3. Purpose of data processing
The hoster is used for the purpose of a secure, fast and efficient provision of our online offer as well as the reliable presentation and provision of our website by a professional provider. Our legitimate interest lies in these purposes.
4. Duration of storage, possibility of objection and elimination
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
5. Conclusion of a contract on order processing
In connection with the data processing described above, the data is transferred and processed by our external hoster: ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf. We have concluded an order processing contract with our hoster. This is a contract required by data protection law, which ensures that ALL-INKL.COM – Neue Medien Münnich only processes the personal data of our site visitors according to our instructions and in compliance with data protection regulations (DSGVO, BDSG, etc.).
V. Provision of the website and creation of log files
1. Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the system of the calling end device.
The following data is collected:
(1) Information about the type of browser and the version used.
(2) The operating system of the user
(3) The user’s Internet service provider
(4) The IP address of the user
(5) Date and time of access
(6) Internet pages from which the user’s system accesses our Internet site
(7) Internet pages that are accessed by the user’s system via our Internet site.
This data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
2. Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 p. 1 lit. f DSGVO.
3. Purpose of the data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for branding purposes does not take place in this context.
These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 p. 1 lit. f DSGVO.
4. Duration of storage, possibility of objection and elimination
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling end device is no longer possible.
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.
VI. Contact by e-mail and/or telephone
1. Description and scope of data processing
Our website and our signatures provide e-mail addresses and telephone numbers that can be used to contact us electronically and/or by telephone. In this case, the personal data of the person concerned transmitted with the e-mail will be stored. In the case of contact by telephone, personal data may also be stored in order to process your inquiry.
In this context, the data will not be passed on to third parties. The data is used exclusively for contacting you and for conducting the conversation.
2. Legal basis for data processing
The legal basis for the processing of data transmitted in the course of sending an e-mail or in the course of a telephone call is Art. 6 para. 1 p. 1 lit. f DSGVO. If the contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
3. Purpose of the data processing
The processing of personal data serves us solely to process the contact. This is also the basis for the necessary legitimate interest in the processing of the data.
4. Duration of storage, possibility of objection and elimination
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For personal data sent by e-mail or transmitted by telephone, this is the case when the respective conversation with the person concerned has ended. The conversation shall be deemed to have ended when the circumstances indicate that the matter in question has been conclusively clarified. If a contract is concluded as a result of the contact, the corresponding (statutory) obligations and regulations regarding data protection shall apply.
If a data subject contacts us by e-mail or telephone, he or she may object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.
VII Contact form
1. Description and scope of data processing
A contact form is available on our website, which you can use to contact us electronically. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. These data are:
(1) Name (mandatory field)
(2) Company
(3) E-mail address (mandatory field)
(4) Telephone number
(5) Your message (mandatory field)
(6) Other personal data that you send us via the message field in the contact form.
The following data is also stored at the time the message is sent:
(1) The IP address of the user
(2) Date and time of registration
For the processing of the data, reference is made to this data protection information during the sending process and you must confirm that you are aware of it. In this context, the data will not be passed on to third parties. The data will be used exclusively for the processing of the conversation.
2. Legal basis for data processing
The legal basis for the processing of data transmitted by means of the contact form is Art. 6 para. 1 p.1 lit. f DSGVO. If the contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DSG-VO.
The legal basis for the processing of all other personal data processed during the sending process, which are transmitted by means of the contact form, is Art. 6 para. 1 p. 1 lit. f DSGVO.
3. Purpose of the data processing
The processing of personal data from the input mask serves us solely to process the contact. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. These purposes are also our legitimate interest.
4. Duration of storage, possibility of objection and elimination
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
If a user contacts us via the form, he can object to the storage of his personal data at any time. In such a case, the conver-sation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.