The basis of effective data protection is comprehensive information about the collection, processing and use of your data ("data processing").With this section we would like to inform you
§ when and for which actions we process data
§ which data we process for which reason
§ who receives data
§ about your rights regarding data processing by us.
The transmission of information to or from this website is secured with TLS encryption.
You can access, print or download this privacy notice permanently and at any time here via the functions of your browser.
I. Contact Details
Controller of the data processing in the meaning of the General Data Protection Regulation (GDPR) within the scope of this website is:
Zum goldenen Hirschen X zerotwonine GmbH
Telephone: +49 69 4609747 0
You can contact our data protection officer at firstname.lastname@example.org.
II. General Information on Data Processing
1. Scope of processing of personal data
The provision of this website requires the processing of various information. In addition, the scope of data processing depends on your use of the functionalities of this website, for instance if you communicate with us or consent to the processing of data.
As a visitor to our websites, you are not subject to any automated decision-making according to Article 22 GDPR.
2. Lawfulness of processing of personal data
The following legal bases apply to the processing of personal data on this website.
Reason for Data Processing
Legal basis in GDPR
Performance of a contract or steps prior to entering into a contract
Art. 6 (1) b)
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
Art. 6 (1) f)
Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Art. 6 (1) a)
The data subject has given consent to the processing of his or her personal data for one or more specific purposes
Art. 6 (1) c)
Processing is necessary for compliance with a legal obligation to which the controller is subject;
3. Erasure and storage of data
We delete personal data as soon as the legal basis for its processing expires. If there are several legal bases for a situation, the deletion occurs with the expiration of the last legal basis, for instance, after fulfillment of all legal storage obligations.
III. Data processing for the provision of this website
In order to display the website, it is necessary to process certain information. This commences with your visit on our website. In addition, we offer functionalities on our website which require further data processing.
1. Log Files
When you visit our website, your browser sends various information to our server. We need these to establish and maintain the connection. Among the data is also your IP address, which we treat as personal data. In addition, the following data is collected:
§ Date and time of visit
§ Source/reference from which you accessed the page
§ Browser used
§ Operating system used
We store this data in so-called server log files. This data is not combined with any other data about you. The storage of log files including your IP address serves the legitimate interest of providing our website and preventing misuse. Stored log files will be deleted after 7 days at the latest, unless longer storage is necessary, for example to prevent or clarify an attack on our website.
2. Technical Cookies
The use of technically conditioned cookies and the associated data processing takes place due to our legitimate interest in a technically flawless and convenient way of using our website. Technically conditioned cookies are usually deleted automatically when you close your browser (session cookies), in other cases only after some time (persistent cookies). The duration of storage of persistent cookies is determined by the provider and can be viewed by you in your browser, for example.
3. Contact form
You can send us an enquiry at any time using the contact form on our website. The following information is requested: name, e-mail-address, subject and your message. The information is marked as mandatory fields. All further data, which you transmit to us in the context of the inquiry, also over the free text field, take place voluntarily.
We use this data exclusively for answering your inquiries and the associated communication. The legal basis of this processing of your data depends on the content of your request. In principle, our legitimate interest in providing the contact functionality and responding to your enquiry transmitted via it applies here. If your request is aimed at concluding a contract with us, the processing will take place to take steps prior to entering into a contract.
Your data will be deleted as soon as your request has been processed. In case of the conclusion of a contract we process the data for the performance of the contract, if necessary.
IV. Usage analysis und tracking
We would like to further improve the usability of this website and the attractiveness of our services. For this reason, when you visit our website, we also collect data on usage behavior, which we evaluate for this purpose. For this reason, the following tracking and analysis cookies are also used on our website in addition to the technically conditional cookies shown above.
1. Google (Universal) Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google collects information about your use of this website (including your IP address) in the USA via a cookie, and stores the information. However, we only use Google Analytics with an anonymisation function in which the IP address is shortened within a Member State of the European Union or the European Economic Area before it is transmitted to Google. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. Google analyses the information collected and sends us reports on the usage activities on our website and provides us with additional services for this purpose. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. In addition to blocking all cookies by your browser, you can also prevent Google from processing your data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data within this website in the future (this opt-out cookie works only in this browser and only for this domain, if you delete your cookies in this browser, you have to click this link again.):
You can find more information about Google Analytics in Google's privacy notice: https://support.google.com/analytics/answer/6004245?hl=d.
The legal basis of data processing for analysis purposes is our legitimate interest in a statistical evaluation of the usage in order to identify errors on our website and adapt the service to the demands of users.
It is technically impossible for us to assign the analysis data to a specific person. This analysis data are therefore anonymous information. We are consequently unable to provide any personal information regarding this data.
We also use Google's Doubleclick service. Using this service, a cookie is set and a pseudonymous identification number (ID) is assigned to your browser. The cookie determines whether and which advertisements were displayed and clicked in your browser. This enables us to tailor your advertising even better to your interests. Since we have activated Google's IP anonymisation on this website, your IP address will also be shortened within member states of the European Union or of the European Economic Area in the context of Doubleclick before Google transmits it. Only in exceptional cases will the full IP address be transmitted to Google in the USA and only shortened there. Google analyses the information collected and sends us reports on the usage activities on our website and provides us with additional services for this purpose. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
In addition to the above-mentioned general options for preventing cookies, you can also specifically prevent Google from saving the Doubleclick cookie by downloading an appropriate browser plug-in. You can find it here.
The legal basis of data processing for analysis purposes is our legitimate interest in a statistical evaluation of your user behaviour in order to be able to continuously optimize and better market our website and our services].
Data processing for usage analysis takes place during your visit to our website and only up to the time of your effective objection.
V. Right to object and right to withdraw consent
If the data processing is based on your consent or our legitimate interest, you have the right to object to the processing or to withdraw your consent at any time. Your objection or withdrawal only has an effect for the future. Where the analysis cookies used offer their own technical options for deactivation, this explained above. You may contact email@example.com at any time to exercise your right of objection or revocation. If you object to processing on the basis of our legitimate interest, we may nevertheless continue processing if we can prove compelling reasons worthy of protection which outweigh your interests, rights and freedoms.
VI. Rights of data subjects
If your personal data is processed, you are a data subject within the meaning of Art. 4 para. 1 GDPR. As data subject, you have the following rights with regard to your personal data. To exercise these rights, please contact us using the contact details above.
Right of access by the data subject according to Art. 15 GDPR
You have a right of access concerning your personal data processed by us. This includes the mandatory information set out in Art. 15 GDPR.
Right to rectification according to Art. 16 GDPR
You have the right to request the immediate correction of inaccurate personal data and the completion of incomplete personal data.
Right to erasure according to Art. 17 GDPR
You have the right to request the erasure of your personal data if one of the grounds mentioned in Art. 17 GDPR applies, in particular if there is no longer a legal basis for the processing.
Right to restriction of processing according to Art. 18 GDPR
You have the right to request the restriction of the processing of your personal data if one of the grounds mentioned in Art. 18 GDPR applies, in particular at your request instead of deleting the data.
Right to data portability according to Art. 20 GDPR
You have the right to request all personal data stored by us about you in a structured, commonly used and machine-readable format or to transmit this data to another controller without obstruction by the controller to whom the personal data was made available.
Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR
According to Art. 77 GDPR, you have the right to file a complaint with the supervisory authority responsible for you.
VII. Recipient of data
Some of the processing of your personal data within the framework of the website is also carried out by processors, in particular the hosting of the website and the use of analysis tools. These are included exclusively on the basis of an agreement about the commissioned data processing in accordance with Art. 28 para. 3 GDPR.
VIII. Data transfer to third countries
The personal data we collect from you through this website will not be transferred to countries outside the European Economic Area. Only when using Google Analytics and Doubleclick, and in the exceptional cases described above, your IP address may be transmitted to Google in full and only shortened there.
Google is situated in the US and thus in a so-called "third country" according to Art. 44 GDPR. Google is certified under the EU-US Privacy Shield, which guarantees compliance with a European level of data protection.
Last update: Dec 2018