Privacy
Note: This is a convenience translation. Only the German version is legally binding.
Privacy policy
This privacy policy describes the nature and scope of how we store and process personal data in our online presences such as our homepage and associated social media profiles. In doing so, we refer to terminology defined in the General Data Protection Regulation (“GDPR”), such as “personal data”. Data is personal if it is clearly assigned to a specific natural person or if this assignment can at least be made indirectly. This can happen, for example, via an identifier such as a name or a customer number, but also a technical identifier such as a “browser cookie”.
Responsible for content
Responsible in terms of provision, delivery and content is:
Platform7 mediadesign Management Samuel Schmidt Postfach 20 01 10 34080 Kassel Germany
Processed data and data subjects
- Inventory data (e.g. name and address). - Contact data (e.g. email address and mobile number). - Content data (e.g. form entries, texts and photos). - Usage data (e.g. individual visited pages of our homepage and access times). - Meta information and communication data (e.g. devices used and IP addresses as well as provider information).
Data subjects are visitors of our online presences such as our homepage and associated social media profiles. In the following, these data subjects are described as “users”.
Visitors and users of the online offering (in the following we collectively refer to the data subjects as “users”).
Purpose of this data processing
We ensure that we can make our online offerings available. This includes security-related and content-related aspects that make storage of data necessary. We also use this data to communicate with our users, measure reach and deliver our offering in a targeted manner.
Legal basis
The decisive basis of this privacy policy is the General Data Protection Regulation (GDPR), pursuant to which, in accordance with Art. 13 GDPR, information is provided here about the nature and scope of the shared data. If no legal basis is explicitly referred to in this privacy policy, Article 6 section 1a GDPR (lawfulness of processing) and Art. 7 GDPR (conditions for consent) apply to consent to this privacy policy. For joint communication, in particular answering enquiries, Art. 6 1b GDPR applies. For the fulfilment of legal obligations with which we comply, Art. 6 1c GDPR applies. Article 6 1d GDPR comes into play in the case of vital interests of the data subject.
Data processing with third parties
Only on the basis of statutory permissions do we pass on your data to processors and third parties within the scope of our processing, and only if this is necessary, you have consented, a legal obligation makes it necessary, or on the basis of our legitimate interests (e.g. through the operation of our web host). In the case of processing of data by third parties on the basis of a data processing agreement, the legal basis is Art. 28 GDPR.
Data processing and transfer outside the European Union
In the event of a transfer or processing of data outside the European Union (EU) by us or in the context of the use or disclosure of third-party services, this takes place to fulfil our contractual or pre-contractual obligations, or on the basis of legal requirements, or on the basis of our legitimate interests, or on the basis of the user's consent.
Right to information, rectification, blocking, erasure and objection
Users have the right, upon request and free of charge, to request information (Art. 15 GDPR) about the personal data stored by us and/or to demand rectification, blocking or erasure (Art. 17 GDPR) or restriction (Art. 18 GDPR). Exceptions: This concerns data storage required for business transactions, or the data is subject to statutory retention obligations.
For these purposes, users please contact us (contact details can be found at the beginning of the privacy policy).
Under GDPR Art. 16, users have the right to demand the rectification of inaccurate data concerning them. In this case as well, please contact us.
Filing a complaint
Users also have the right under GDPR Art. 77 to file a complaint with the competent supervisory authority. Users may revoke consents granted to us with effect for the future (GDPR Article 7 para. 3).
Right of revocation and right of objection
Users have the right to revoke granted consents (pursuant to Art. 7 para. 3 GDPR) with effect for the future. Users may object to the future processing of data concerning them at any time on the basis of Art. 21 GDPR.
Cookies
“Cookies” are files that are stored locally on users' computers. With the help of temporary cookies we provide technical services, e.g. the assignment of a session between our online offering and the user's device. These cookies lose their effectiveness when the online offering is left or the relationship between browser and server no longer exists. This depends on the settings of the user's respective browser; we have only limited influence on the deletion of local session cookies. With permanent cookies, we can specify the lifespan of a cookie in order to establish a relationship between server and device even if the browser has been closed in the meantime. We use cookies, for example, to remember and restore login functionalities, the assignment of shopping carts, the short-term caching of settings made on the homepage such as the language of the online presence or font size. Likewise, we can cache personal interests that are of interest, for example, for reach measurement and with which we deliver our online offering in a targeted manner.
Third-party cookies come into play when we use third-party services (e.g. fonts embedded by Google for displaying our homepage texts) that serve to provide our online presence. These cookies are not offered by us.
If cookies are not to be stored locally, users can configure this in their browser settings. Common browsers can enable this globally or for individual websites. However, we point out that preventing cookies may lead to restrictions in the provision of our online presence.
Tracking cookies that primarily serve online marketing and are provided by third parties can also be stopped in this way.
Data erasure
Data erasure or restriction of data takes place on the basis of Article 17 GDPR. We delete data as soon as the purpose no longer applies and no statutory retention obligations (e.g. on the basis of commercial or tax law) exist. If data is not deleted because it is required for other and legally permissible purposes, its processing is restricted.
Web hosting and storage of access data and log files
In order to deliver our online offerings, we use hosting services from third parties. This concerns in particular the provision of web servers and the storage of content of our online offerings in data centres. We also map the data mentioned above via these, as well as contract and communication data of our users. The provision and use by third parties takes place on the basis of our legitimate interests pursuant to Art. 6 1f GDPR and Art. 28 GDPR.
On this basis, in legitimate interest, access data to the server is collected (“server log files”). These include the URL of the accessed website, date and time, retrieved file, data transfer volume, status messages, operating system, browser type and version of the caller, the URL of the previously visited website (“referrer URL”), IP address and the provider used.
These log files are partly subject to statutory retention obligations and are kept by us for 7 days, unless another legal requirement applies. Afterwards, this data is removed. For technical reasons, data may exist in cyclically and automatically created backups. However, these are withdrawn from direct access (i.e. immediate retrieval of the data is not possible) and are removed just as cyclically.
Online forms, newsletter functions and online registrations
We store data entered in online forms, such as personal data, for the purpose of fulfilling our contractual obligations pursuant to Art. 6 1b GDPR. Online forms may contain data queries marked as mandatory fields that we require for the establishment of a relationship between us and the use of the respective offered service.
In some cases we may offer users the ability to create a user account. Which data is required in each case is listed with the respective offer. The data is stored for the purpose of using the respective service (e.g. the email address for sending newsletters when registering for this service). After termination, e.g. by cancellation or revocation of the use of the account, it and the data used with it are deleted. Here too, this is done as described above, subject to all legal regulations. We are entitled to delete the data at any time without the user's consent. The user's own backup of this data is the user's own responsibility.
We also store the user's details when contact is made, e.g. by telephone, email, online forms or messaging functions via portals and social media. We need these to process the user's enquiry. Storage takes place pursuant to Art. 6 1b GDPR. Under certain circumstances, this data is further processed in the IT systems and tools we use to ensure processing; this takes place in our legitimate interest (this concerns, for example, an email processing program or a CRM tool).
Newsletters serve the purpose of informing our users and transmitting promotional information, e.g. references to any offers. Newsletters are sent electronically by means of emails. Other technological services may also be used if the user has given consent. Unsubscribing from our newsletters follows the double-opt-out procedure. An unsubscription must therefore be technically confirmed via email. Registration for the newsletter likewise follows the double-opt-in procedure, which must be confirmed via a previously sent email. The newsletter can be cancelled at any time via corresponding technical integrations by means of an unsubscribe link. In order to be able to prove that users once consented to receiving the newsletter, we store relevant data such as email address, date and time of consent for up to 36 months. This is done in legitimate interest. To measure the success of newsletters, “web beacon” methods may be used. These are small images that are retrieved from the newsletter provider's servers when the newsletter is opened. The time of retrieval, the IP address and technical information about the provider, operating system and browser are collected. Under certain circumstances, it is technically possible to draw conclusions about the newsletter recipient; however, this is not in our interest and is not further processed for the purpose of personal tracking.
Google Analytics
On the basis of our legitimate interests for the analysis and evaluation as well as success measurement of our online presences, we use Google Analytics. This is an analysis service of Google LLC (“Google”). Google provides this service, among other things, by means of cookies that are processed on Google servers, primarily in the USA. Google is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
In our legitimate interest, Google processes collected information about the user's activities on our online offerings in order to prepare reports and statistics on activities for us and to provide tips for improving our services.
We use this service with IP anonymisation in order to reduce the storage of data. The user's IP address is truncated by Google within the European Union or in other contracting states of the Agreement on the European Economic Area (EEA). Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. Here too, the use of cookies by Google can be prevented in the user's own browser.
Further information:
https://www.google.com/intl/de/policies/privacy/partners (“How Google uses data when you use our partners' sites or apps”)
http://www.google.com/policies/technologies/ads (“Data use for advertising purposes”)
http://www.google.de/settings/ads (“Manage information Google uses to show you advertising”)
Social media profiles
We use social media for our public relations work. This includes exchange and communication with our users and the publication of information. The terms and conditions of the respective platforms apply.
Integration of third-party services and content
Within our online presences we use services and service offerings from third-party providers on the basis of our legitimate interests. These are, for example, the embedding of content such as videos and photos as well as embedded fonts that would normally not be available on the user's computer. For technical reasons, third-party providers have access to the user's IP address. We cannot rule out that third-party providers additionally use web beacons or cookies as well as pixel tags to collect statistical data, e.g. for marketing purposes. In doing so, the provider may also perceive the length of stay on the online offering and create a movement profile.
In particular, we use videos from the platform YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated). We also use Google Fonts for displaying fonts (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated).