Bioreal Online-Shop

Data protection

Data protection

Privacy policy

Below you will find information about which personal data we process, for what purpose, on what basis and for how long:

Overview / Table of contents

In our data protection information you will find the following information:

A. Our contact details and general information on data processing by us

B. Scope of the processing of personal data via our website

C. Your rights as a data subject

A.   Our contact details and general information on data processing by us

Name and contact details of the person responsible

Responsible in terms of data protection law for the collection and use of personal data is

Lavano GmbH
Lußhardtstraße 1
D-76689 Karlsdorf-Neuthard

Managing directors: Hans-Georg Gack and Jan-Christoph Gack

Phone +49 (0)7251 / 349990
E-mail info@naturkost.com

Commercial register number HRB 231647 at the local court of Mannheim

Sales tax identification number according to § 27 UStG: DE 811742373.

Further information about our company can be found in the imprint on our homepage.

Legal basis for the processing of personal data

In general, the following applies to the processing of personal data by us:

  • Insofar as we obtain your consent for processing operations involving personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (DSGVO) serves as the legal basis for the processing of personal data.
  • When processing personal data that is necessary to fulfil a contract with you, Art. 6 (1) (b) DSGVO serves as the legal basis. This also applies if the processing is necessary for the performance of pre-contractual measures.
  • If the processing of personal data is necessary to comply with a legal obligation to which we are subject, Art. 6 (1) (c) DSGVO serves as the legal basis.
  • In the event that your vital interests or those of another natural person make the processing of personal data necessary, Art. 6 (1) (d) DSGVO serves as the legal basis.
  • If the processing is necessary to protect a legitimate interest of us or a third party and your interests, fundamental rights and freedoms do not override this interest, Art. 6 (1) (f) DSGVO serves as the legal basis for the processing.

Data deletion and storage period

We generally delete or block the personal data as soon as the purpose of the storage no longer applies. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which we are subject as the responsible party. Data will also be blocked or deleted if a storage period prescribed by the aforementioned norms expires, unless there is a necessity for the continued storage of the data for the conclusion or fulfilment of a contract.

Specifically, this means:
If we process personal data on the basis of consent to data processing (Art. 6(1)(a) of the General Data Protection Regulation, or DSGVO for short), the processing ends with your revocation, unless there is another legal ground for processing the data, which is the case if we are still entitled to process your data for the purpose of fulfilling a contract at the time of revocation or if the data processing is necessary to safeguard our legitimate interests (cf. below in each case).

If, exceptionally, we process the data on the basis of our legitimate interests (Art. 6(1)(f) DSGVO) within the framework of a previously conducted assessment, we store it until the legitimate interest no longer exists, the assessment comes to a different conclusion or you have effectively objected in accordance with Art. 21 DSGVO (cf. the visually highlighted "Reference to special right of objection" under C.).

If we process the data for the purpose of fulfilling the contract, we store the data until the contract has finally been fulfilled and settled and no more claims can be asserted under the contract, i.e. until the statute of limitations has expired. The general limitation period according to § 195 BGB is three (3) years. However, certain claims, such as claims for damages, only become time-barred after 30 years (cf. § 197 BGB). If there is reasonable cause to assume that this is relevant in an individual case, we store the personal data for this period. The aforementioned limitation periods begin at the end of the year (i.e. 31 December) in which the claim arose and the creditor becomes aware of the circumstances giving rise to the claim and the person of the debtor or should have become aware without gross negligence.

We would like to point out that we are also subject to statutory retention obligations for tax and accounting reasons. These oblige us to retain certain data, which may also include personal data, for a period of six (6) to ten (10) years as proof of our accounting. These retention periods take precedence over the deletion obligations mentioned above. The retention periods also begin at the end of the relevant year, i.e. on 31 December.

Source of personal data

The personal data we process originates primarily from the data subjects themselves, for example by them

  • as a user of our website, transmitting information, such as the IP address, to our web server via the web browser and their terminal device (for example, a PC, smartphone, tablet or notebook),
  • as interested parties requesting information material or an offer from us,
  • order from us or conclude a contract with us as customers,
  • as suppliers supplying us with goods as agreed or providing us with services or similar.

Only in very exceptional cases may the personal data we process also originate from third parties, for example when a person acts on behalf of a third party.

General categories, purposes and legal basis for processing personal data

We process the following categories of personal data:

  • Users of our website,
  • prospective customers,
  • customers, and
  • suppliers.

Depending on the category of data involved, we process personal data for the following purposes and on the basis of the legal basis of the General Data Protection Regulation (GDPR) mentioned in each case:

User data: We collect and process data from users of our website on a non-personal basis. It is not possible for us to assign data to specific persons. The IP address is only processed anonymously. If, by way of exception, personal data is nevertheless involved, we process it to protect our legitimate interests on the basis of Art. 6(1)(f) DSGVO. Our legitimate interests in this sense are our interest in the security and integrity of our website and the data on our web server (in particular fault and error detection, as well as tracking unauthorised access), as well as marketing interests and interests in statistical surveys (to improve our website and our services and offers). Within the framework of a balancing process, we have come to the conclusion that the data processing is necessary to protect the aforementioned legitimate interests and that your interests or fundamental rights and freedoms, which require the protection of personal data, do not outweigh these interests.

Data of interested parties: Insofar as we process data of interested parties of our services, this only happens if you enter this data in an input field or by e-mail for the purpose of enquiring and sending it to us. These entries are voluntary for you. We then process this data exclusively for the purpose of processing your enquiry to us. The processing of this data voluntarily transmitted to us for the purpose of providing information about our services is carried out as pre-contractual processing pursuant to Art. 6(1)(b) DSGVO and/or on the basis of the consent you have given by transmission pursuant to Art. 6(1)(a) DSGVO.

Customer data: We process the data of our customers for the purpose of processing the contract in accordance with Art. 6(1)(b) DSGVO and/or on the basis of consent given in accordance with Art. 6(1)(a) DSGVO. This also applies to processing operations that are necessary for the implementation of pre-contractual measures (e.g. in the context of the preparation and negotiation of offers).

Supplier data/business partner data: We process the data of our suppliers and business partners for the purpose of contract processing pursuant to Art. 6(1)(b) DSGVO and/or on the basis of consent granted pursuant to Art. 6(1)(a) DSGVO. This also applies to processing operations that are necessary for the implementation of pre-contractual measures (e.g. in the context of the preparation and negotiation of offers).

Recipients or categories of recipients of personal data

Your personal data will only be disclosed or otherwise transferred to third parties if this is necessary for the purpose of processing a contract (e.g. for processing an order) or for billing purposes (e.g. for processing a payment transaction when purchasing goods or services), if there is a legitimate interest in the disclosure/transfer and your interests or fundamental rights and freedoms are not overridden or you have given your prior effective consent.

Categories of recipients may be:

  • Service providers (publishers, printers, etc.)
  • Shipping service providers, suppliers
  • Payment service providers, banks
  • Tax consultants

Data processing for newsletter dispatch

It is possible to subscribe to a free newsletter on our website or as part of an enquiry to us. When you register for the newsletter, the data from the input mask is transmitted to us. This is exclusively your e-mail address.

When you subscribe to the newsletter, the following data is also collected (opt-in proof):

  • Your IP address, as well as
  • date and time of your registration.

This serves to prevent misuse of the services or your e-mail address and to meet our legal obligation to prove that an opt-in, i.e. an explicit consent to receive the newsletter, has actually been given by the e-mail address.

For the processing of the data, your consent is obtained during the registration process and reference is made to this privacy policy.

If you purchase goods or services on our website and enter your e-mail address, this may subsequently be used by us to send you a newsletter. In such a case, only direct advertising for our own similar goods or services will be sent via the newsletter.

Registration for our newsletter takes place in a so-called double opt-in process. This means that after registration you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other people's e-mail addresses. Clicking on the link with which you confirm the registration leads to a data collection of your IP address and the exact time (date and time) of the click. This data processing serves to meet our legal obligation to prove that an opt-in, i.e. an explicit consent to receive the newsletter, has actually been given by the e-mail address.

Purpose of data processing: The collection and processing of your e-mail address is used to deliver the newsletter. We use the e-mail address for advertising purposes.
The collection of IP address and time when clicking on the confirmation link in the double opt-in email serves to comply with our legal obligation to provide evidence for obtaining explicit consent. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used.
A possible storage beyond the cancellation of the newsletter for up to three years serves the purpose of proving a formerly granted consent and a possible defence against claims.

Legal basis for data processing: The legal basis for the processing of data after the user has subscribed to the newsletter is your consent in accordance with Art. 6 Para. 1 Letter a) DSGVO.
In the event of the prior purchase of similar goods or services, the legal basis for the data processing within the scope of the newsletter is Section 7 (3) UWG.
The legal basis for storing the IP address and time when you click on the confirmation link in the double opt-in email and for possible further storage for up to three years after you have unsubscribed from the newsletter is our legitimate interest according to Art. 6 para. 1 letter f) DSGVO. The legitimate interest in this case is to be able to prove that you have given your consent and to be able to defend against claims derived from this.

Duration of storage: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, your e-mail address will be stored as long as the subscription to the newsletter is active.

We may store the unsubscribed e-mail addresses together with the data collected when confirming consent to send newsletters for up to three years on the basis of our legitimate interests before deleting them in order to be able to prove consent previously given. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time.

The other personal data collected during the registration process is usually deleted after a period of seven days.

Possibility of objection and cancellation: The subscription to the newsletter can be cancelled at any time free of charge and without any formalities. For this purpose, there is a corresponding link in each newsletter. This also enables you to revoke your consent to the storage of personal data collected during the registration process. Please also note the additional options and information regarding our dispatch service provider MailChimp in the following paragraphs.

Use of the "MailChimp" dispatch service provider
The newsletter is sent using "MailChimp", a newsletter sending platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

The email addresses of our newsletter recipients, as well as their other data described in these newsletter instructions, are stored on MailChimp servers in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to its own information, MailChimp may use this data to optimise or improve its own services, e.g. to technically optimise the dispatch and display of the newsletters or for economic purposes in order to determine which countries the recipients come from. However, MailChimp does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.

MailChimp is certified under the US-EU data protection agreement "Privacy Shield" and thus undertakes to comply with the EU data protection regulations. Furthermore, we have concluded an "order processing agreement" with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties.

You can view MailChimp's privacy policy here.

Statistical collection and analyses
The newsletters contain a so-called "web beacon", i.e. a pixel-sized file that is retrieved from the MailChimp server when the newsletter is opened. Within the scope of this retrieval, technical information, such as information on the browser and your system, as well as your IP address and the time of the retrieval are initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined with the help of the IP address) or the access times. Statistical surveys also include determining whether newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our intention nor that of MailChimp to observe individual users. The analyses serve us much more to recognise the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

Online access and data management
There are cases where we direct newsletter recipients to MailChimp's websites. For example, our newsletters contain a link with which newsletter recipients can call up the newsletters online (e.g. in the event of display problems in the email programme). Furthermore, newsletter recipients can subsequently correct their data, such as the email address. Likewise, the privacy policy of MailChimp can only be accessed on their site.
In this context, we would like to point out that cookies are used on MailChimp's websites and personal data is thus processed by MailChimp, its partners and service providers used (e.g. Google Analytics). We have no influence on this data collection. For further information, please refer to MailChimp's privacy policy.
We would also like to draw your attention to the possibility of objecting to the collection of data for advertising purposes on the websites http://www.aboutads.info/choices/ and http://www.youronlinechoices.com/ (for the European area).

Contact via e-mail, fax and telephone call

You can contact us via various contact channels if you wish. For this purpose, you will also find an e-mail address, telephone number and fax number on the website. Even if you send us an e-mail, call us or send us a fax, we will inevitably process your personal data. This is because at least the personal data transmitted with the e-mail, the fax or your telephone are stored by us or our systems.

The data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation.

Purpose of data processing: The processing of personal data transmitted by e-mail, fax or telephone is used to process your contact and your request. We absolutely need your e-mail address, your fax number or your telephone number in order to be able to reply at all. This is also the legitimate interest in processing the data.

Legal basis for data processing: The legal basis for the processing of data is Art. 6 (1) (a) DSGVO in the case of consent, which can be seen in the establishment of contact, and otherwise our legitimate interest in data processing in accordance with Art. 6 (1) (f) DSGVO.
If the contact or your enquiry is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) DSGVO (implementation of pre-contractual measures).

Duration of storage: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

For personal data sent by e-mail, this is the case when the respective conversation with you has ended and we have then waited a grace period of up to 3 months to see whether we may need to refer to your request or the details of the communication again. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

Fax data is stored separately from print data in the fax machine's memory. After the fax has been printed out, the occupied memory space is released again so that the next fax can be received and stored there. Parts of the fax can remain temporarily in the machine's memory after printing until they are overwritten by the next received fax. Normally this leads to an automatic deletion of the data after approx. 1-2 weeks. If it is a computer fax, we receive your fax as an e-mail and the explanations for e-mail apply accordingly.

In the case of an incoming telephone call or an outgoing call to us, your telephone number or your name/company name stored with your telephone provider as well as the date and time of the call are stored in our telephone system in a so-called ring memory, which overwrites the oldest data with new data. As a rule, this leads to an automatic deletion of the data in the telephone system after approx. 3-4 months.

The communication may be subject to a retention obligation under commercial or tax law, which then takes precedence (cf. the explanations above on "Data deletion and storage period").

Possibility of objection and removal: You have the possibility at any time to revoke a given consent to the processing of personal data or to object to further data processing on the grounds of legitimate interest (cf. the reference to the special right of objection under C. of this data protection notice). In such a case, the conversation cannot be continued.
The revocation of consent or the objection to further data processing is made possible by informal communication to us (e.g. by e-mail).
All personal data stored in the course of contacting us will be deleted in this case.

B.    Scope of the processing of personal data via our website

As a matter of principle, we collect and use personal data of users in the context of the use of our website only to the extent that this is necessary for the provision of a functional website as well as our contents and services. The collection and use of our users' personal data generally only takes place with the user's consent. An exception applies in those cases in which obtaining prior consent is not possible for actual reasons and/or the processing of the data is permitted by legal regulations.

Provision of the website and creation of log files

Every time the website is accessed, our system automatically collects data and information for technical reasons. These are stored in the log files of the server. These are:

  • Date and time of access,
  • URL (address) of the referring website (referrer),
  • Web pages that are called up by the user's system via our website,
  • screen resolution of the user,
  • file(s) retrieved and report on the success of the retrieval,
  • the amount of data sent,
  • the user's Internet service provider,
  • browser, browser type and browser version, browser engine and engine version,
  • operating system, operating system version, operating system type, as well as
  • the anonymised IP address and the Internet service provider of the user.

This data is processed separately from other data. This data is not processed together with other personal data of the user. It is not possible for us to assign this data to a specific person.

Purpose of data processing: The temporary processing of data by the system is necessary to enable the delivery of the contents of our website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise our offer and the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

Legal basis for data processing: The temporary storage of the data and the log files is based on the legal basis of Art. 6(1)(f) DSGVO. Our overriding legitimate interest in this data processing lies in the aforementioned purposes.

Duration of storage: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.

Possibility of objection and removal: The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object. However, the user can stop using the website at any time and thus prevent the further collection of the aforementioned data.

Payment processing / data transfer to payment service providers

On our website, you have the option of initiating a payment transaction directly. Depending on which payment service provider you select in the order process, we will pass on the payment data collected for this purpose to the credit institution commissioned with the payment or the selected payment service provider in order to process payments. In some cases, the selected payment service providers also collect this data themselves if you create or have already created an account with them. In this case, you must register with the payment service provider with your access data during the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

In addition to the options of transferring the invoice amount in advance and ordering a SEPA direct debit, the payment service provider PayPal can also be selected. In this last case the following applies

PayPal:
When paying via PayPal, credit card via PayPal, direct debit via PayPal or "purchase on account" via PayPal, we pass on your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" via PayPal. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values. Further information on data protection, including information on the credit agencies used, can be found in PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Registration option/Login on the website

On our website, we offer users the opportunity to register by providing personal data and thus create a customer account with us. The data is entered in an input mask and transmitted to us and stored.

The information requested can be found in detail in the registration form. Mandatory fields are clearly marked with an asterisk. The data that we request as mandatory fields are required in order to process your registration and create your customer account.

The following data is also stored at the time of registration:

  • IP address of the user,
  • date and time of registration.

The user's consent to the processing of this data is obtained as part of the registration process.

Purpose of data processing: The voluntary registration serves to provide you with a customer account so that you can place your orders quickly and conveniently without having to enter your data again.

Legal basis for data processing: The legal basis for the processing of data is Art. 6 para. 1 letter a) DSGVO if the user has given his consent. If the registration serves the fulfilment of a contract to which you are a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 (1) (b) DSGVO (fulfilment of contract).

Duration of storage: The data will be deleted as soon as you delete your customer account with us or inform us that you want us to delete your customer account for you, i.e. you revoke your consent.
Note: Despite revocation, it may be necessary to store your personal data in order to comply with contractual or legal obligations. We refer to the explanations above under "Data deletion and storage period".

You have the possibility to terminate your registration at any time. You can do this via your customer account on our website or by notifying us accordingly.
If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion. Furthermore, you can change the data stored about you at any time.

Contact form and e-mail contact

Our website contains a contact form which can be used to contact us electronically. If you use this option, the data entered in the input mask will be transmitted to us and stored.

You can use our general contact form to send us a message at any time. The information requested can be found in detail in the web form. Mandatory fields are clearly marked with an asterisk. The data that we request as mandatory fields are required in order to process your data entry.

The following data is also stored at the time the message is sent:

  • The IP address of the user,
  • Date and time of sending.

The data defined as mandatory fields is data that we absolutely need to answer your enquiry or process your contact.

For the processing of the data, you will be informed again about the data processing during the submission process and referred to this privacy policy.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.

In this context, the data will not be passed on to third parties. The data will be used exclusively for processing.

Purpose of data processing: The processing of the personal data from the input mask serves us to process the contact and to deal with your request. In the case of contacting us, this is also the legitimate interest in processing the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

Legal basis for data processing: The legal basis for processing the data is our legitimate interest in processing the data pursuant to Art. 6 (1) (f) DSGVO. The legitimate interest lies in the fact that we need to process your data in order to be able to process and, if necessary, answer your enquiry or contact.
If the contact or your enquiry is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) DSGVO (implementation of pre-contractual measures).
The legal basis for processing the other personal data processed during the submission process is our legitimate interest in data processing pursuant to Art. 6 (1) (f) DSGVO, which in this case is to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified.
The communication may be subject to a retention obligation under commercial or tax law, which then takes precedence (cf. the explanations above on "Data deletion and storage period").
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

Possibility of objection and removal: You have the possibility at any time to object to further data processing on the grounds of legitimate interest (cf. reference to special right of objection under C. of this data protection information). In such a case, the conversation cannot be continued.
The objection to further data processing is made possible by informal notification to us (e.g. by e-mail).
All personal data stored in the course of contacting us will be deleted in this case.

Use of cookies by us and by third-party providers

When calling up individual pages, we use so-called cookies. These are small text files that are stored on your end device (PC, smartphone, tablet, etc.). If you call up a website, a cookie may be stored by your browser. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
In addition, cookies from third-party providers may be used. These cookies could also enable an analysis of the user's surfing behaviour. If this is the case, we will inform you about this separately in this privacy policy directly in the information about the respective third-party tools (such as analysis tools, plugins or similar).

When you access our website, you will be informed about the use of cookies for analysis purposes and your consent to the processing of personal data used in this context will be obtained.

Cookies are used to make our website usable at all or to make it more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. The following data is temporarily stored in the cookies:

  • Shopping cart
  • Order process
  • Login to the customer account

Our content management system also uses technically necessary cookies to enable functions such as logging into the administrator area or, if applicable, writing and posting comments for registered visitors (if enabled by us). The setting of cookies is necessary to recognise logged-in visitors.

We use the web shop system of Shopware. The shop system automatically places a static cookie with you when you visit our shop. The cookie stores the following information in order to recognise you the next time you visit the shop and to be able to display your settings and preferences:

  • Your shopping cart
  • The products compared during your current visit
  • The history of the products you have compared
  • The products you have recently viewed
  • If applicable, your affiliation to a certain buyer group.
  • This information is only stored anonymously.

Purpose of data processing: The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. The user data collected through technically necessary cookies are not used to create user profiles.

Analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimise our offer.

Legal basis for data processing: The legal basis for the processing of personal data using cookies is Art. 6 (1) (f) DSGVO, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 (1) (a) DSGVO if the user has consented to this; otherwise, it is also a legitimate interest on our part based on the aforementioned purposes pursuant to Art. 6 (1) (f) DSGVO.

Duration of storage: Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our service providers (third-party providers) to recognise your browser the next time you visit (persistent cookies).

In addition, we store the data collected on the basis of a legitimate interest until the legitimate interest no longer exists, the weighing of interests comes to a different result or you have effectively lodged an objection in accordance with Art. 21 DSGVO (cf. the visually highlighted "Reference to special right of objection" under C.). It will be reviewed regularly, at least annually, whether the legitimate interest still exists. In particular, our interest no longer exists if the data is no longer sufficiently relevant for us in terms of evaluation and statistics of website use due to the passage of time, which can be assumed after three years at the latest.

Possibility of objection and removal: Cookies are stored on your computer and transmitted from it to our site. Therefore, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. Such a "Do-Not-Track" setting of your browser is understood by us as an objection to the further collection and use of your personal data. Note: If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Use of the analysis tool Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site.

We would like to point out that on this website Google Analytics has been extended by the code "anonymizeIp" in order to ensure anonymised collection of IP addresses (so-called IP masking). By activating IP anonymisation on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

For more information on terms of use and data protection, please visit http://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/.

Purpose of data processing: The analysis tool and the analysis cookies are used to improve the quality of our website and its content. In this way, we learn how the website is used and can thus continuously optimise our offer. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there./p>

Legal basis for data processing: The legal basis for the processing of personal data is Art. 6 (1) (f) DSGVO, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes. The company Google Inc. has joined the "EU-US Privacy Shield", so that the transfer of data to the USA is permitted./p>

Duration of storage: The cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent./p>

In addition, we store the data collected on the basis of a legitimate interest until the legitimate interest no longer exists, the weighing comes to a different result or you have effectively objected in accordance with Art. 21 DSGVO (cf. the visually highlighted "Reference to special right of objection" under C.). It will be reviewed regularly, at least annually, whether the legitimate interest still exists. In particular, our interest no longer exists if the data is no longer sufficiently relevant for us in terms of evaluation and statistics of website use due to the passage of time, which can be assumed after three years at the latest./p>

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link.
You can prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the future collection of your data when visiting this website: Deactivate Google Analytics/

Encryption of the website

The website and thus the data transmissions via it are encrypted in accordance with the SSL standard (https protocol).

Transmission of personal data to a third country (other EU countries)

There is an intention to transfer personal data to the United States of America (USA). There is an adequacy decision of the EU Commission stating that personal data may be transferred to the USA if the recipient has joined the "EU-U.S. Privacy Shield". Personal data will therefore only be transferred to recipients in the U.S. that have demonstrably joined the EU-U.S. Privacy Shield.

The intention refers specifically to a data transfer to the following companies:

Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). as provider of the web analytics tool Google Analytics.

The aforementioned companies have joined the EU-U.S. Privacy Shield and have subjected themselves to regulations comparable to the EU level of data protection. The transfer of data to these companies is therefore generally permissible. Furthermore, in the case of commissioned processing, corresponding commission processing agreements have been concluded with these companies to safeguard the data and our rights to issue instructions.

C. Data subject rights

If your personal data is processed, you are a "data subject" and you have the following rights vis-à-vis us as the data controller:

Right to information

You have the right to obtain confirmation from us free of charge as to whether we are processing personal data relating to you. If this is the case, you have the right to be informed about this personal data and to receive further information, which you can find in Art. 15 DSGVO. You can contact us for this purpose by post or by email.

Right to rectification

You have the right to demand that we correct any inaccurate personal data relating to you without delay. You also have the right - taking into account the above-mentioned purposes of the processing - to request the completion of incomplete personal data - also by means of a supplementary declaration. To do so, you can contact us by post or by e-mail.

Right to erasure

You have the right to demand the immediate deletion of the personal data concerning you if one of the conditions of Art. 17 DSGVO applies. You can contact us for this purpose by post or by e-mail.

Right to restriction of processing

Sie haben das Recht, von uns die Einschränkung der Verarbeitung zu verlangen, wenn eine der Voraussetzungen des Art. 18 DSGVO vorliegt. Sie können sich hierfür per Post oder per E-Mail an uns wenden.

Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients by the controller.

Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and you have the right to transfer this data to another controller without hindrance from us if the conditions of Art. 20 DSGVO are met. You can contact us for this purpose by post or by e-mail.

Right of objection in case of processing due to legitimate interest

SInsofar as we exceptionally process personal data on the basis of Art. 6(1)(f) DSGVO (i.e. because of legitimate interests), you have the right to object to the processing of personal data relating to you by us at any time for reasons arising from your particular situation. If we cannot demonstrate compelling legitimate grounds for further processing that override your interests, rights and freedoms, or if we process the data concerned from you for the purpose of direct marketing, we will then no longer process your data (cf. Art. 21 DSGVO). You can contact us for this purpose by post or by e-mail.
A technical procedure that you use, e.g. a clear technical information that your web browser transmits to us ("Do-Not-Track" message), also counts as an objection in this sense.

Right of revocation in the case of granted consent

You have the right to revoke your consent to the collection and use of personal data at any time with effect for the future. You can contact us for this purpose by post or by e-mail. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

Automated decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. Unless the decision is necessary for the conclusion or performance of a contract between you and us, it is permitted by Union or Member State law to which we are subject and that law contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or the decision is taken with your explicit consent. Such automated decision-making does not take place by us.

Voluntary provision of data

If the provision of personal data is required by law or contract, we will always point this out when collecting the data. In some cases, the data we collect is necessary for the conclusion of a contract, namely if we would otherwise not be able to fulfil our contractual obligation to you or would not be able to fulfil it sufficiently. You are under no obligation to provide the personal data. However, failure to provide the data may mean that we are unable to perform or offer a service, action, measure or similar requested by you or that it is not possible to conclude a contract with you.

Right of appeal to a supervisory authority

Without prejudice to any other rights, you have the right at any time to lodge a complaint with a supervisory authority for data protection, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of personal data concerning you violates data protection law.

Responsible for us:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Königstraße 10A
70173 Stuttgart
Webseite: www.baden-wuerttemberg.datenschutz.de.  


Status of our data protection information: 25.05.2018

This website uses cookies to ensure the best experience possible. More information...