Data protection declaration
This privacy statement explains you (hereafter short “data”) within our online offer and the about the nature, the scope and purpose of the processing of personal with him related Web pages, features, content and external online presences, like for example our social media profiles on (hereinafter together referred to as “Online services”). In terms of on the used terminology, such as “Processing” or “Responsible”, we refer to the definitions in article 4 of the data protection Regulation (DSGVO).
Person in charge
Link to disclaimer: http://fabiennedenberg.com/disclosure/
Types of data processed:
-Inventory data (E.g., names, addresses).
-Contact information (E.g., E-Mail, phone numbers).
-Content data (for example, text input, photographs, videos).
-Use data (E.g., interest in content, access times visited Web pages,).
Meta – / communication data (for example, device information, IP addresses).
Special and / or sensitive personal data that we process includes:
– data from persons under the age of 16 Our website and / or service does not intend to collect data about website visitors who are younger than 16 years old. Unless they have permission from parents or guardians. However, we can not check if a visitor is older than 16 e.g. when they leave comments or subscribe to our mailing list. We encourage parents to be involved in the online activities of their children, in order to prevent data about children being collected without parental consent. If you are convinced that we have collected personal information about a minor without this consent, please contact us via firstname.lastname@example.org and we will delete this information.
Categories of data subjects
Visitors and users of the website (below refer to the affected people collectively as “Users”).
Purpose of the processing
-Provision of the website, its features and content.
-Respond to contact requests and communication with users.
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); identify a natural person is considered, the directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, to an online ID (E.g. cookie) or to one or more special features can be identified, are the expression of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Processing” is anyone with or without the help of automated procedures operation performed or every such operation number in connection with personal data. The concept goes a long way and includes practically every dealing with data.
“Use of pseudonyms” the processing of personal data in such a way that the personal data without using additional information of no longer a specific person concerned can be associated, if these additional Information is kept separately and are subject to technical and organisational measures that ensure that the personal data is assigned to one identified or identifiable natural person.
“Profiling” any kind of automated processing of personal data, that is, that these personal data are used to evaluate certain personal aspects relating to a natural person, in particular to aspects with regard to job performance, economy, health, personal preferences, interests, reliability, behavior, to analyze the place of residence or change of location of that natural person or to predict.
The natural or legal person, public authority, agency or other body which determines the purposes and means of the processing of personal data alone or jointly with others, is known as “Responsible”.
“Processor” a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Relevant legal bases
In accordance with article 13 DSGVO we inform you with the legal bases of our data processing operations. If the legal basis in the privacy statement is not called, the following applies: the legal basis for the obtaining of consent is article 6 par. 1 lit. a and article 7 DSGVO, the legal basis for the processing to meet is our services and contractual measures, as well as answering questions on article 6 par. 1 lit. b DSGVO, the legal basis for the processing to fulfil our legal obligations is article 6 par. 1 lit. c DSGVO, and the legal basis for the processing to preserve our legitimate interests is article 6 par. 1 lit. f DSGVO. The case that vital interests of the data subject or another natural person require a processing of personal data, article 6 serves for par. 1 lit. d DSGVO as the legal basis.
We meet in accordance with article 32 DSGVO, taking into account the State of technology, the implementation costs and the type, scope, the circumstances and the purposes of the processing, as well as the different probability of occurrence and severity of risk for the Rights and freedoms of natural persons, appropriate technical and organisational measures to ensure a level of protection commensurate with the risk.
In particular ensuring the confidentiality, integrity and availability of data among the measures by controlling physical access to the data, as well access concern them, the entry, deployment, ensure the availability and their Separation. Furthermore, we have established procedures which ensure a perception of affected rights, deletion of data and response to risk the data. In addition, we consider the protection of personal data already in the development or selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and privacy-friendly default settings (art. 25 DSGVO).
Cooperation with subcontractors and third parties
If we disclose information to other persons and companies (subcontractors or third parties) during our processing, they send to them or otherwise provide them access to the data, this is done only on the basis of a legal permit () for example, if a transmission of data to third parties, such as to payment, pursuant Article 6 par. 1 lit. b DSGVO to the performance of the contract is required), you have given your consent, so provides a legal obligation or on the basis of our vested interests (E.g. for the use of agents, Web hosting providers, etc.).
If we hire third parties to process data on the basis of a so-called “contract processing agreement”, this is done on the basis of article 28 DSGVO.
Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European economic area (EEA)) or third-party disclosure, or transfer of data to third parties this is done in the context of the use of services This is only if it is done to meet our (pre) contractual obligations, upon your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual licences, process or we let the data to a third country only in the presence of the special conditions of articles 44 et seq. DSGVO process. I.e. the processing occurs for example based on special guarantees, such as determining officially recognized, one of the EU of appropriate level of data protection (E.g. for the United States through the “Privacy shield”) or compliance with officially recognised special contractual Obligations (so-called “standard contractual clauses”).
Rights of the persons concerned
You have the right to ask whether the data will be processed a confirmation and information on these data as well as more information and copy of the data in accordance with article 15 DSGVO.
They have accordingly. Article to require 16 DSGVO the right, the completion of the data concerning you or the correction of incorrect data.
You have in accordance with article 17 DSGVO the right to require that relevant data will be immediately deleted, or alternatively in accordance with article 18 DSGVO to require a limitation of the data.
You have the right to require that the personal data that you have provided to us in accordance with article 20 DSGVO to get and submitting them to other officials to demand.
You 77 DSGVO the right to submit a complaint to the competent supervisory authority have article also gem..
Right of withdrawal
You have the right, granted consent pursuant article to withdraw 7 para 3 DSGVO with effect for the future
Right of objection
You may contradict the future processing of personal data after Ma administration of article 21 DSGVO at any time. The opposition can be made in particular for processing for purposes of direct marketing.
Cookies and right of objection in direct marketing
Small files called “Cookies”, which are stored on computers of users. Different readings can be stored within the cookies. A cookie is used primarily to save the information to a user (or the device on which the cookie is stored) during or after his visit within a website. Cookies are known as temporary cookies, or “Session-Cookies” or “transient cookie”, which are deleted after a user leaves an online offer and closes his browser. In such a cookie, for example, the contents of a shopping cart in an online store or a login status can be saved. Cookies are called “permanent” or “persistent”, which will be retained after the browser is closed. So, for example, the login status can be saved when the users search them for several days. As the interests of users, it can be stored in such a cookie used for audience measurement, or marketing purposes. Cookies are referred to as “Third party cookies”, which are offered by other vendors as the person in charge, who runs the online offer, (otherwise, if they are only the cookies it is called “First-Party Cookies”).
If users do not want that stored cookies on your computer, they will be asked the appropriate option in the system settings of your browser to disable. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional limitations of this online offer.
Deletion of data
According to legal requirements in Germany, the storage for 10 years in accordance with § 147 ABS. 1 is AO, 257 par. 1 No. 1 and 4, par. 4 HGB (books, records, reports, accounting records, books, for taxation-related documents, etc.) and 6 years According to article 257, paragraph 1 No. 2 and 3, par. 4 HGB (commercial letters).
According to statutory provisions in Austria, the storage for 7 J according to article 132, paragraph 1 is BAO (accounting records, receipts/invoices, accounts, documents, business ftspapiere, statement of revenue and expenditure, etc.), for 22 years in connection with Land and for 10 years for documents in connection with electronically supplied services, telecommunication, radio and television services provided to non-entrepreneurs in EU Member States and for which the mini-one-stop-shop (MOSS) in claim in wealthier countries.
Comments and contributions
Users can leave comments or other contributions, their IP addresses on the basis of our legitimate interests within the meaning of article 6 can par. 1 lit. f. DSGVO stored for 7 days. This is done for our safety, if someone leaves illegal content in comments and contributions (prohibited political propaganda, insults, etc.). In this case, we can be prosecuted even for the comment or post and are therefore interested in the identity of the author.
Furthermore we reserve the right, on the basis of our vested interests pursuant Article 6 par. 1 lit. f. DSGVO, the information of the user for the purpose of spam detection to process.
The data provided in the context of comments and posts are permanently stored by us to contrast of the users.
Retrieval of profile images with Gravatar
We use the Gravatar of automatic domestic Inc. 60 29th Street #343, San Francisco, CA 94110, United States, within our website and especially the blog.
Gravatar is a service where you can enroll users and store profile images and their email addresses. If users with the respective email address on other online presences (primarily blogs) leave posts or comments, so their profile pictures in addition to the posts or comments can be represented. This the email address communicated by the users at Gravatar is for the purpose of testing whether her a profile is stored, transmitted encrypted. This is the only purpose of the email address delivery and will not be used for other purposes, but then deleted.
The Gravatar is used on basis of our legitimate interests within the meaning of article 6 paragraph 1 lit. (f) DSGVO, because we offer the contribution and comment authors using Gravatar to personalize your posts with a profile picture.
By viewing the images, Gravatar brings the IP address of the user experience, because this is essential for communication between a browser and an online service. For more information about the collection and use of data by Gravatar can be found in the privacy notice by Automattic: https://automattic.com/privacy/.
If users do not want that appears a user image associated with your email address at Gravatar in the comments, you should use an E-Mail address to comment which is not deposited at Gravatar. We also point out that it is also possible to use an anonymous or even no E mail address, if users do not want, that sends the own email address at Gravatar is. Users can prevent complete the transfer of data by not using our comment system.
When contacting with us (E.g. via contact form, email, phone or via social media) the data of the user are lit on the handling of the contact request and whose settlement pursuant Article 6 para 1. b. (vertraglicher-in the frame / pre-contractual relations), article 6 par. 1 lit. processed f. (other enquiries) DSGVO… The data of the user can be stored in a customer relationship management system (CRM system”) or similar inquiries organization.
We delete the requests if they are no longer required. We check the necessity every two years; Also apply the legal archiving requirements.
The following remarks, we inform you about the content of our newsletter, as well as the sign – shipping – the statistical evaluation procedures, and your right of appeal on. By subscribing to our newsletter, you agree with the reception and the procedures.
Content of the newsletter: we send newsletters, emails and other electronic notifications with promotional information (the “newsletter”) only with the consent of the recipient or a legal permit. Unless specifically described in its contents in the context of a registration to the newsletter, they are decisive for the consent of the users. Indeed include our newsletter information about us and our services.
Double opt-in and logging: Login to our newsletter is in a so-called double-opt-in proceed. I.e. You will receive an email where you will be asked to confirm your registration after registration. This confirmation is necessary, so no one can log on with foreign E-mail addresses. Registration for the newsletter are logged to prove to the registration process according to the legal requirements. This includes the storage of registration and the confirmation time, as also the IP address. Also logs the changes to your data stored at the shipping provider.
Credentials: To sign up for the newsletter to login, it is sufficient if you specify your E-mail address. Optionally we ask you a name, specify for the purpose of personal address in the newsletter.
The dispatch of the newsletter and the performance measurement associated with it be on basis of a consent of the recipient pursuant Article 6 par. 1 lit. a, article 7 DSGVO i.V.m section 7 para 2 No. 3 UWG or if a consent is not required, on the basis of our vested interests to direct marketing gem. Article 6 para 1 lt. f. DSGVO i.V.m. § 7 para 3 UWG.
The logging of the notification procedure is based of our legitimate interests according on article 6 par. 1 lit. f DSGVO. Our interest focuses on the use of a user-friendly and secure Newslettersystems which both serve our business interests, corresponds to the expectations of users and allows us to further proof of consent.
Termination/cancellation – you can cancel the receipt of our newsletter at any time, i.e. Withdraw their consent. You will find a link to the cancellation of the newsletter at the end of each newsletter. We can save the worn out E-mail addresses before we delete it to prove a consent formerly given to up to three years on the basis of our legitimate interests. The processing of these data is limited to the purpose of a possible defense of claims. An individual application for cancellation is possible at any time, provided that at the same time, the former existence is confirmed consent.
Newsletter – MailChimp
The sending of the newsletter is made by means of the shipper will be added “MailChimp”, a Newsletterversandplattform of US provider rocket science group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, United States. The privacy provisions of the shipper will be added you can see here: https://mailchimp.com/legal/privacy/. The rocket science Group LLC d/b/a MailChimp is certified under the privacy shield agreement and this provides a guarantee to comply with the European data protection level (= https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG & status Active). The shipping provider is lit on basis of our legitimate interests pursuant Article 6 para 1. f. DSGVO and a job processing contract com. Article 28 paragraph 3 S. 1 used DSGVO.
The shipping provider can use the the recipient data in anonymous form, i.e. without Association to a user to optimize or improve the own services, for example to the technical optimization of dispatch and the appearance of the newsletter or for use statistical purposes. The shipping provider uses the data of our newsletter recipients but not, to write them themselves or to pass the data on to third parties.
Newsletter – success measurement
The newsletter contains a so called “web beacon”, i.e. a pixel-large file, that when you open the newsletter from our server, or if we are running a shipping provider, is retrieved from the server. First technical information, such as information about your browser and your system, as well as your IP address and time of the call are collected in the framework of this call.
This information is used to improve the services on the basis of the technical data or the target groups and their reading behaviour on the basis of those technical polling places (which are determined using the IP address) or the access times. The finding also belongs to the statistical surveys that the newsletter be opened when they are opened and which links are clicked. This information can be associated although for technical reasons the individual receivers. However, it is neither our aspirations, yet, if used, to observe that the shipper will be added, individual users. The evaluations serve us much more, knowing the reading habits of our users and customize our content on them, or to send different content according to the interests of our users.
A separate cancellation of performance measurement is not possible, in this case the entire subscription must be cancelled.
Hosting and email
The hosting services used by us are the provision of the following services: infrastructure and platform services, compute, storage and database services, email, security services, as well as technical maintenance services, we employ for the purposes of the operation of this website.
This process of customers, prospective customers, and visitors to this website on the basis of our legitimate interests we or our hosting provider inventory data, contact data, content data, contract data, usage data, meta – and communication data to an efficient and safe provision of this website according Article 6 par. 1 lit. f DSGVO i.V.m article 28 DSGVO (contract order processing).
Online presences in social media
We maintain online presence within social networks and platforms to communicate with there active customers, prospective customers and users and they find there about our services.
We would like to point out that data of users outside the area of the European Union can be processed here. This risk can arise for users, because such as the enforcement of the rights of users could be made more difficult. As we point out on U.S. carriers that are certified under the privacy shield, that they undertake to comply with EU data protection standards.
In addition, processed the user normally for market research and promotional purposes. So, user profiles can be created from the usage patterns and resulting interests of users. The usage profiles can be used in turn, switch E.g. advertisements within and outside of the platforms, which presumably correspond to the interests of users. For these purposes, cookies on the computers of users are stored usually stores the usage patterns and the interests of users. Also also data can be stored in the user profiles regardless of the equipment used by the users (especially if the users are members of the respective platforms and are logged in this).
The processing of personal data of users is based on our legitimate interests in an effective information of users and communication with the users according Article 6 par. 1 lit. f. DSGVO. If the user will be asked by the respective providers to a consent to the data processing (i.e. declare their consent via the hook to a check box or confirmation a button) the legal basis of the processing is article 6 para 1 lit. a. Article 7 DSGVO.
For a detailed description of the respective processing and the inconsistent ways (opt-out), please refer to the below linked disclosures of the provider.
Also in the case of information requests and the exercise of rights of users, we point out that it most effectively can be asserted at the party. Only the provider each have access to the data of the user and can take direct action and provide information. If you still need help, then you can contact us.
– Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Datenschutzerklärung: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
– Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Datenschutzerklärung/ Opt-Out: http://instagram.com/about/legal/privacy/.
– Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) – Datenschutzerklärung: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization, Privacy Shield: https:// www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
– Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – Datenschutzerklärung/ Opt-Out: https://about.pinterest.com/de/privacy-policy.
– LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland) – Datenschutzerklärung https://www.linkedin.com/legal/privacy-policy , Opt-Out: https://www.linkedin.com/psettings/guest-controls/ retargeting-opt-out, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
– Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland) – Datenschutzerklärung/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.
Integration of services and content of third parties
We use within our online offer on basis of our legitimate interests (i.e., interest in the analysis, optimization and economic operation of our website for the purposes of article 6 par. 1 lit. f. DSGVO) content or services by A third-party, to include their content and services, such as videos or fonts (hereinafter uniformly referred to as “Content”).
This always assumes that the third-party provider of such content, perceive the IP address of the user, because they could not send the content without the IP address to their browser. The IP address is required for the presentation of this content. We try to using only such content, their respective provider use the IP address for the delivery of content. Third parties can also called pixel tags (invisible graphics, also called “Web Beacons” referred to) use for statistical and marketing purposes. Information such as the visitor traffic on the pages of this website can be evaluated by the “pixel tags”. The pseudonymous information can be stored in cookies on the user’s device and include technical information about the browser and operating system, referring Web sites, visit time and further information on the use of our online offer contain, as well as be connected with such information from other sources.
Typekit fonts from Adobe
We might place upon our legitimate interests (i.e., interest in the analysis, optimization and economic operation of our website for the purposes of article 6 par. 1 lit. f. DSGVO) external “type Kit” fonts of the provider of Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland a. Adobe is certified under the privacy shield agreement and this provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG & State = Active).