Home >Data protection
Data protection
Generally
As the operator of this website and as a company, we come into contact with your personal data. This means all data that says something about you and with which you can be identified. In this data protection declaration, we would like to explain how, for what purpose and on what legal basis we process your data.
Responsible for data processing on this website and in our company:
Grundstücksgemeinschaft Sigrid and Thomas Othmer
Ostseeallee 20
Niendorf / Ostsee
Germany
Phone: +49 4503 86521
E-Mail: Thomas.Othmer@gmx.de
General information
SSL or TLS encryption
If you enter your data on websites, place online orders or send e-mails over the Internet, you must always expect unauthorized third parties to access your data. There is no complete protection against such access. However, we do everything we can to protect your data in the best possible way and to close the security gaps as far as we can.
An important protection mechanism is the SSL or TLS encryption of our website, which ensures that data that you transmit to us cannot be read by third parties. You can recognize the encryption by the lock icon in front of the entered internet address in your browser and by the fact that our internet address begins with https:// and not with http://.
Encrypted payment transactions
Payment data, such as e.g. the account or credit card number. That is why payment transactions with the usual means of payment are carried out exclusively via an encrypted SSL or TLS connection.
How long do we store your data?
At some points in this data protection declaration we inform you about how long we or the companies that process your data on our behalf store your data. If there is no such information, we will store your data until the purpose of the data processing no longer applies, you object to the data processing or you revoke your consent to the data processing.
In the event of an objection or revocation, however, we may continue to process your data if at least one of the following conditions is met:
- We have compelling legitimate grounds for continuing data processing that outweigh your interests, rights and freedoms (only if you object to data processing; if the objection is directed against direct mail, we cannot provide legitimate grounds).
- The data processing is necessary to assert, exercise or defend legal claims (does not apply if your objection is directed towards direct advertising).
- We are legally obliged to keep your data.
In this case, we will delete your data as soon as the prerequisite(s) no longer apply.
Data transfer to the USA
On our website we also use tools from companies that transmit your data to the USA and store it there and process it if necessary. This is particularly important to you because your data does not enjoy the same protection in the USA as it does in the EU, where the General Data Protection Regulation (GDPR) applies. For example, US companies are B. obliged to release personal data to security authorities without you as the person concerned being able to take legal action against this. It is therefore possible that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities.
Your rights
Objection to data processing
IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS IN THE PROCESSING OF YOUR DATA AND THEREFORE ARE BASED ON ART. 6 ABS. 1 SET 1 LIT. F) GDPR, YOU HAVE ACCORDING TO ART. 21 GDPR THE RIGHT TO OBJECT TO THIS. THIS ALSO APPLIES TO PROFILING TAKEN ON THE BASIS OF THE MENTIONED REGULATION. A CONDITION IS THAT YOU STATE REASONS FOR THE OBJECTION THAT RESULT FROM YOUR PARTICULAR SITUATION. NO JUSTIFICATION IS REQUIRED IF THE OBJECTION IS AGAINST THE USE OF YOUR DATA FOR DIRECT ADVERTISING.
THE CONSEQUENCY OF THE OBJECTION IS THAT WE ARE NO LONGER ALLOWED TO PROCESS YOUR DATA. THE CONSEQUENCE OF THE OBJECTION IS THAT WE ARE NO LONGER ALLOWED TO PROCESS YOUR DATA.
- WE CAN PROVE COMPREHENSIVE PROTECTIVE REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOM.
- THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
THE EXCLUSIONS DO NOT APPLY IF YOUR OBJECTION IS AGAINST DIRECT ADVERTISING OR PROFILING RELATED TO DIRECT ADVERTISING.
Other rights
Revocation of your consent to data processing
Many data processing operations are based on your consent. You grant this e.g. B. by ticking the appropriate box in online forms before you send the form, or by allowing certain cookies when you visit our website. You can revoke your consent at any time without giving reasons (Article 7 (3) GDPR). From the time of revocation, we may no longer process your data. The only exception: we are legally obliged to keep the data for a certain period of time. Such retention periods exist in particular in tax and commercial law.
Right to lodge a complaint with the competent supervisory authority
If you believe that we are violating the General Data Protection Regulation (GDPR), you have the right under Art. 77 GDPR to complain to a supervisory authority. You can contact a supervisory authority in the member state where you live, where you work or where the alleged infringement took place. The right to complain exists in addition to administrative or judicial remedies.
Right to data portability
Data that we process automatically on the basis of your consent or in fulfillment of a contract must be handed over to you or a third party in a common machine-readable format if you request this. We can only transfer the data to another person responsible if this is technically possible.
Right to data information, -deletion and -correction
According to Art. 15 GDPR, you have the right to receive information free of charge about what personal data we have stored about you, where the data comes from, to whom we transmit the data and for what purpose it is stored. If the data is incorrect, you have the right to rectification (Art. 16 GDPR), under the conditions of Art. 17 GDPR you may request that we delete the data.
Right to restriction of processing
In certain situations, according to Art. 18 GDPR, you can request that we restrict the processing of your data. Apart from storage, the data may then only be processed as follows:
- with your consent
- to assert, exercise or defend legal claims
- to protect the rights of another natural or legal person
- for reasons of important public interest of the European Union or a member state
The right to restriction of processing exists in the following situations:
- You have contested the accuracy of your personal data held by us and we need time to verify this. Here the right exists for the duration of the examination.
- The processing of your personal data is unlawful or was unlawful in the past. Here you have the right to alternatively delete the data.
- We no longer need your personal data, but you need it to exercise, defend or assert legal claims. Here you have the right to alternatively delete the data.
- You have an objection according to Art. 21 para. 1 GDPR and now your and our interests must be weighed against each other. The right exists here as long as the result of the weighing up is not yet certain.
Hosting und Content Delivery Networks (CDN)
External hosting
Our website is located on a server of the following internet service providers (hosters):
Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4-6
32339 Espelkamp
Has an order processing contract been concluded with the hoster or are Standard Contractual Clauses (SCC) used?
Yes
How do we process your data?
The host saves all data from our website. This also includes all personal data that is collected automatically or through your input. In particular, this can be: your IP address, pages viewed, name, contact data and requests as well as meta and communication data. When processing data, our hoster adheres to our instructions and only processes the data to the extent that this is necessary in order to fulfill our obligation to perform.
On what legal basis do we process your data?
Since we address potential customers via our website and maintain contacts with existing customers, the data processing by our hoster serves to initiate and fulfill the contract and is therefore based on Art. 6 § 1 lit. b) GDPR. In addition, it is in our legitimate interest as a company to provide a professional website that meets the necessary security, speed and efficiency requirements. In this respect, we also process your data on the basis of Art. 6 § 1 lit. f) GDPR.
Data collection on this website
Use of cookies
Our website places cookies on your device. These are small text files that are used for different purposes. Some cookies are technically necessary for the website to function at all (necessary cookies). Others are required to perform certain actions or functions on the site (functional cookies). For example, without cookies it would not be possible to use the advantages of a shopping cart in an online shop. Other cookies are used to analyze user behavior or to optimize advertising. If we use third-party services on our website, e.g. B. to process payment transactions, these companies can also leave cookies on your device when you access the website (so-called third-party cookies).
How do we process your data?
Session cookies are only stored on your device for the duration of a session. So as soon as you close the browser, they disappear by themselves. Persistent cookies, on the other hand, remain on your device unless you delete them yourself. This can lead, for example, to your user behavior being analyzed on a permanent basis. You can use the settings in your browser to influence how it handles cookies:
- Would you like to be informed when cookies are set?
- Do you want to exclude cookies in general or for specific cases?
- Do you want cookies to be automatically deleted when you close your browser?
If you deactivate or do not allow cookies, the functionality of the website may be restricted.
If we use cookies from other companies or for analysis purposes, we will inform you about this in this data protection declaration. We also ask for your consent in this regard when you visit our website.
On what legal basis do we process your data?
We have a legitimate interest in ensuring that our online offerings can be used by visitors without any technical problems and that all desired functions are available to them. The storage of necessary and functional cookies on your device is therefore based on Art. 6 Para. 1 lit. f) GDPR. We set all other cookies on the basis of Art. 6 § 1 lit. a) GDPR, provided you give us your consent. You can revoke this at any time with effect for the future. If you consented to the placement of necessary and functional cookies when you asked for your consent, these cookies will also be stored exclusively on the basis of your consent.
Cookie consent with the Legal Cockpit
What is the Legal Cockpit cookie tool?
Consent Management Platform (CMP) for collecting and processing GDPR-compliant consents
Who processes your data?
Legalcore AG, Reinhardtstr. 7, 10117 Berlin
Has an order processing contract been concluded with Legal Cockpit?
Yes
Where can you find more information about data protection at Legal Cockpit?
https://cockpit.legal/datenschutz/
How do we process your data?
We use the Legal Cockpit consent management platform to obtain your consent to the storage of cookies on your device in accordance with data protection regulations. If you visit our website and close the Legal Cockpit cookie window by asking for your consent, the following data will be transmitted to the company:
- your IP address
- Information about your browser
- Information about your end device
- the time of your visit to the website
In addition, the Legal Cockpit stores a cookie in your browser in order to be able to assign the consent given or its revocation to your browser. All data collected is stored until the cookies are no longer needed, you delete the Legal Cockpit cookie or request us to delete the data. This does not apply if we are legally obliged to store the data.
On what legal basis do we process your data?
We are legally obliged to obtain the consent of our website visitors for the use of certain cookies. In order to fulfill this obligation, we use Legal Cockpit. The legal basis for data processing is therefore Art. 6 § 1 lit. c) GDPR.
Server log files
Server log files record all requests and access to our website and record error messages. They also include personal data, in particular your IP address. However, this is anonymized by the provider after a short time, so that we cannot assign the data to your person. The data is automatically transmitted from your browser to our provider.
How do we process your data?
Our provider saves the server log files in order to be able to track the activities on our website and to locate errors. The files contain the following data:
- Browser type and version
- operating system used
- Referrer URL
- Host name of the accessing computer
- Time of server request
- IP address (anonymized if necessary)
We do not merge this data with other data, we only use it for statistical analysis and to improve our website.
On what legal basis do we process your data?
We have a legitimate interest in our website running correctly. It is also in our legitimate interest to receive an anonymous overview of access to our website. The data processing is therefore according to Art. 6 § 1 lit. f) GDPR lawful.
contact form
You can send us a message using the contact form on this website.
How do we process your data?
We save your message and the information from the form in order to be able to process your request including follow-up questions. This also applies to the contact details provided. We will not pass on the data to other people without your consent.
How long do we store your data?
We delete your data as soon as one of the following points occurs:
- Your request has finally been processed.
- You ask us to delete the data.
- You revoke your consent to storage.
This only does not apply if we are legally obliged to keep the data.
On what legal basis do we process your data?
If your request is related to our contractual relationship or serves to carry out pre-contractual measures, we process your data on the basis of Art. 6 § 1 lit. b) GDPR. In all other cases, it is our legitimate interest to effectively process inquiries addressed to us. The legal basis for data processing is therefore Art. 6 § 1 lit. f) GDPR. If you have consented to the storage of your data, Art. 6 § 1 lit. a) GDPR the legal basis. In this case, you can revoke your consent at any time with effect for the future.
Inquiry by e-mail, telephone or fax
You can send us a message by e-mail or fax or give us a call.
How do we process your data?
We save your message as well as your self-made contact details or the transmitted telephone number in order to be able to process your request including follow-up questions. We will not pass on the data to other people without your consent.
How long do we store your data?
We delete your data as soon as one of the following points occurs:
- Your request has finally been processed.
- You ask us to delete the data.
- You revoke your consent to storage.
This only does not apply if we are legally obliged to keep the data.
On what legal basis do we process your data?
If your request is related to our contractual relationship or serves to carry out pre-contractual measures, we process your data on the basis of Art. 6 § 1 lit. b) GDPR. In all other cases, it is our legitimate interest to effectively process inquiries addressed to us. The legal basis for data processing is therefore Art. 6 § 1 lit. f) GDPR. If you have consented to the storage of your data, Art. 6 § 1 lit. a) GDPR the legal basis. In this case, you can revoke your consent at any time with effect for the future.
Communication via WhatsApp
What is WhatsApp?
instant messaging service
Who processes your data?
WhatsApp Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland
Has an order processing contract been concluded with WhatsApp?
Yes
Where can you find more information about data protection at WhatsApp?
https://www.whatsapp.com/legal/#privacy-policy
On what basis do we transfer your data to the USA?
How do we process your data?
For communication with our customers and other people outside our company, we use the instant messaging service WhatsApp in the “WhatsApp Business” variant.
Communication takes place via end-to-end encryption (peer-to-peer). This prevents WhatsApp or other third parties from gaining access to the communication content. We have also set up our accounts in such a way that there is no automatic comparison with the address book on the smartphones used. However, WhatsApp has access to the metadata of the communication process (e.g. sender, recipient and time of communication) and says it shares this data with Meta, its US-based parent company.
How long do we store your data?
We delete your data as soon as one of the following points occurs:
- The purpose of data processing no longer applies.
- You ask us to delete the data.
- You revoke your consent to storage.
This does not apply if we are legally obliged to keep the data.
On what legal basis do we process your data?
If our exchange via WhatsApp is related to our contractual relationship or serves to carry out pre-contractual measures, we process your data on the basis of Art. 6 $ 1 lit. b) GDPR. In all other cases, it is our legitimate interest to effectively process inquiries addressed to us and to maintain business contact with other people. The legal basis for data processing is therefore Art. 6 § 1 lit. f) GDPR. If you have consented to the storage of your data, Art. 6 § 1 lit. a) GDPR the legal basis. In this case, you can revoke your consent at any time with effect for the future.
registration function
In order to be able to use certain functions or offers on our website, you must register. This requires your e-mail address and, if applicable, other personal data.
How do we process your data?
We store the data you provide when registering and use it to provide you with the function or offer for which you registered. If there are any changes to the offering or feature, we will use your email address to let you know. We also use your e-mail address to make you further contract offers if necessary.
How long do we store your data?
We delete your data as soon as one of the following points occurs:
- The purpose of data processing no longer applies.
- You ask us to delete the data.
- You revoke your consent to storage.
This does not apply if we are legally obliged to keep the data.
On what legal basis do we process your data?
We store and use your data in order to fulfill the user relationship established during registration and, if necessary, to initiate further contracts. The legal basis is therefore Art. 6 § 1 lit. b) GDPR.
comment function
You have the option of commenting on content on our website via the appropriate input window. In order to be able to use the comment function, you must enter your e-mail address. It is also possible to subscribe to the comments of others.
How do we process your data?
If you leave comments on our website, we store the following data:
- your comment
- Your email address
- the time of the comment
- other data that you provide in the course of the comment, e.g. B. Your username
- your IP address
We store data with which you can be identified in order to be able to take legal action against you if your comment is offensive, inflammatory or otherwise criminally relevant.
If you subscribe to comments, we will send you an email to verify that you are the owner of the email address provided. You can unsubscribe from receiving the comments at any time via a link in this email.
How long do we store your data?
We store your comments and the associated data until the commented content has been completely deleted or the comments are removed for legal reasons, e.g. B. because they violate criminal provisions, must be deleted.
If you have subscribed to comments and unsubscribe from the notification, all data provided as part of the subscription will be deleted. Do we also store your data for another reason, e.g. B. because you have subscribed to our newsletter, this data is not affected by the deletion.
On what legal basis do we process your data?
By using the comment function, you consent to the storage of your data. The basis for data processing is thus Art. 6 § 1 lit. a) GDPR. You can revoke your consent at any time by sending us an email explaining your revocation. From this point on, we are no longer allowed to process your data.
Analytics Tools and Advertising
We use the following tools to analyze the behavior of our website visitors and to show you advertising.
Matomo Analytics (installed locally)
How do we process your data?
We are always interested in optimizing our website for users and placing advertising in the best possible way. We are helped here by Matomo Analytics, an open source tool that analyzes user behavior and thus provides us with the necessary database for adjustments. Matomo uses cookies, device fingerprinting and other technologies that enable cross-site recognition of the user to analyze user behavior. Matomo records the page views, the region from which they come, the IP address, referrer, browser and operating system used. The tool can also measure whether our website visitors perform certain actions (e.g. click on links or make purchases). After your IP address has been anonymized, the data collected will only be stored on our server.
On what legal basis do we process your data?
As a website operator, we have a legitimate interest in the anonymous analysis of user behavior for the purpose of optimizing our website and the advertising placed there. The data processing is therefore according to Art. 6 § 1 lit. f) GDPR lawful. In the event that you z. B. have agreed to the storage of cookies or otherwise consented to data processing, Art. 6 § 1 lit. a) GDPR the legal basis. You can revoke your consent at any time with effect for the future.
plugins and tools
Google Web Fonts (local hosting)
We use fonts from the US company Google on our website. We have installed the fonts locally so that there is no connection to the Google servers when you visit our website.
You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy:https://policies.google.com/privacy?hl=de.
Font Awesome (lokales Hosting)
We use icons from the Font Awesome icon library on our website. The library is maintained by Fonticons Inc. offered. We have installed the icons locally so that there is no connection to the company’s servers when you visit our website.
For more information about Font Awesome, see https://fontawesome.com/ and there specifically in the privacy policy: https://fontawesome.com/privacy.
OpenStreetMap
What is OpenStreetMap?
Map service of the OpenStreetMap Foundation
Who processes your data?
OpenStreetMap-Foundation (OSMF), Cowley Road, St John’s Innovation Centre, Cambridge CB4 0WS, Großbritannien
Where can you find more information about data protection at OpenStreetMap?
https://wiki.osmfoundation.org/wiki/Privacy_Policy
How do we process your data?
We use maps from the OpenStreetMap Foundation on our website. For you, this means that your IP address and information about your surfing behavior will be forwarded to the foundation and stored there when you visit our website. For this purpose, the foundation leaves cookies on your device or uses comparable recognition technologies. If you have allowed your location to be determined in your device settings, OpenStreetMap will also save this data.
On what legal basis do we process your data?
OpenStreetMap maps make it easier for visitors to find the places listed on our website. As a company, we have a legitimate interest in this. The data processing is therefore according to Art. 6 § 1 lit. f) GDPR lawful.
If you have consented to data processing, we will process your data exclusively on the basis of Art. 6 § 1 lit. a) GDPR. You can revoke your consent at any time. From the time of revocation, we may no longer process your data.
eCommerce
Customer and contract data
How do we process your data?
If we enter into a contract with you, we require certain personal data from you. We collect, process and use this data only insofar as it is necessary to establish our legal relationship, to structure it in terms of content or to change it. If you can only use our services via our website or if the services are billed via the website, we also collect usage data if this is necessary to enable you to use our offer or to bill you for the service used.
How long do we store your data?
We store your data until our legal relationship ends, unless we are required by law to keep the data longer.
On what legal basis do we process your data?
We store your data in order to fulfill the contract with you or to carry out pre-contractual measures. The basis for data processing is thus Art. 6 § 1 lit. b) GDPR.