Private Policy

German Version

NO COOKIES ARE SET. 

Introduction

With the following data protection declaration, we would like to explain to you which types of your personal data (hereinafter also referred to as „data“) we process for which purposes and to what extent. The data protection declaration applies to all processing of personal data carried out by us, both as part of the provision of our services and in particular on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as „online offer“). ).

The terms used are not gender specific.

As of May 6, 2022

Table of Contents

Responsible

The person responsible for data protection is the operator of this website named in the imprint.

impressumm@128hz.de Imprint:

imprint

Overview of processing

The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.

Types of data processed

  • inventory data.
  • Contact details.
  • content data.
  • usage data.
  • Meta/Communication Data.

Categories of data subjects

  • user.

Purposes of processing

  • Provision of contractual services and customer service.
  • Safety measures.
  • Management and response to inquiries.
  • feedback.
  • Provision of our online offer and user-friendliness.

Deletion of data

The data processed by us will be deleted in accordance with the legal requirements as soon as your consent to processing is revoked or other permissions are no longer applicable (e.g. if the purpose of processing this data no longer applies or it is not required for the purpose).

If the data is not deleted because it is required for other, legally permissible purposes, its processing will be limited to these purposes. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be stored for commercial or tax reasons or whose storage is necessary to assert, exercise or defend legal claims or to protect the rights of another natural or legal person.

Our data protection information can also contain further information on the storage and deletion of data, which apply primarily to the respective processing.

Provision of the online offer and web hosting

In order to be able to provide our online offer securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers managed by them) the online offer can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services, as well as security and technical maintenance services.

The data processed as part of the provision of the hosting offer may include all information relating to the users of our online offer that arises in the course of use and communication. This regularly includes the IP address, which is necessary in order to be able to deliver the content of online offers to browsers, and all entries made within our online offer or on websites.

  • Types of data processed: content data (e.g. entries in online forms); Usage data (e.g. websites visited, interest in content, access times); Meta/communication data (e.g. device information, IP addresses).
  • Affected persons: users (e.g. website visitors, users of online services).
  • Purposes of processing: Provision of our online offer and user-friendliness.
  • Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

Further information on processing processes, procedures and services:

  • Email delivery and hosting:The web hosting services we use also include sending, receiving and storing emails. For these purposes, the addresses of the recipients and senders as well as other information regarding the e-mail dispatch (e.g. the providers involved) and the content of the respective e-mails are processed. The aforementioned data can also be processed for SPAM detection purposes. Please note that e-mails are generally not sent in encrypted form on the Internet. As a rule, e-mails are encrypted during transport, but (unless a so-called end-to-end encryption method is used) not on the servers from which they are sent and received.

Blogs and publication media

We use blogs or comparable means of online communication and publication (hereinafter „publication medium“). The data of the readers are processed for the purposes of the publication medium only insofar as it is necessary for its presentation and the communication between authors and readers or for reasons of security. In addition, we refer to the information on the processing of visitors to our publication medium in the context of this data protection notice.

  • Types of data processed: Inventory data (e.g. names, addresses); Contact information (e.g. email, phone numbers); Content data (e.g. entries in online forms); Usage data (e.g. websites visited, interest in content, access times); Meta/communication data (e.g. device information, IP addresses).
  • Affected persons: users (e.g. website visitors, users of online services).
  • Purposes of processing: provision of contractual services and customer service; Feedback (e.g. collecting feedback via online form); Safety measures; Provision of our online offer and user-friendliness; Management and response to inquiries.
  • Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR); Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

Further information on processing processes, procedures and services:

  • Comments and Posts:When users leave comments or other posts, their IP addresses may be stored based on our legitimate interests. This is for our security if someone leaves illegal content in comments and posts (insults, forbidden political propaganda, etc.). In this case, we can be prosecuted for the comment or contribution and are therefore interested in the identity of the author. Furthermore, we reserve the right to process user information for the purpose of spam detection on the basis of our legitimate interests. On the same legal basis, we reserve the right, in the case of surveys, to store the IP addresses of users for the duration and to use cookies, to avoid multiple votes. The personal information communicated in the comments and posts, any contact and website information as well as the content information will be stored by us permanently until the user objects.
  • Akismet Anti-Spam Check:Akismet Anti-Spam Checking – We use the Akismet service based on our legitimate interests. With the help of Akismet, comments from real people are distinguished from spam comments. For this purpose, all comment information is sent to a server in the USA, where it is analyzed and stored for four days for comparison purposes. If a comment has been classified as spam, the data will be stored beyond this time. This information includes the name entered, the email address, the IP address, the content of the comment, the referrer, information about the browser used and the computer system and the time of the entry. Users are welcome to use pseudonyms or not to enter their name or email address. You can completely prevent the transfer of data by not using our comment system. That would be a shame, but unfortunately we don’t see any alternatives that work just as effectively;Service Provider: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA; Website: https://automattic.com ; Privacy Policy: https://automattic.com/privacy .
  • Profile pictures of Gravatar:Profile pictures – We use the Gravatar service within our online offer and in particular in the blog. Gravatar is a service where users can register and store profile pictures and their email addresses. If users leave posts or comments with the respective email address on other online presences (especially in blogs), their profile pictures can be displayed next to the posts or comments. For this purpose, the e-mail address provided by the users is transmitted to Gravatar in encrypted form for the purpose of checking whether a profile has been saved for it. This is the sole purpose of submitting the email address. It will not be used for other purposes, but will be deleted afterwards. Gravatar is used on the basis of our legitimate interests, since we use Gravatar to offer the authors of contributions and comments the opportunity to personalize their contributions with a profile picture. By displaying the images, Gravatar learns the IP address of the user, as this is necessary for communication between a browser and an online service. If users do not want an avatar linked to their Gravatar email address to appear in the comments, they should use an email address that is not stored with Gravatar to comment. We also point out that it is also possible to use an anonymous email address or no email address at all, if the users do not want their own email address to be sent to Gravatar. Users can completely prevent the transfer of data by not using our comment system;Service Provider: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA; Website: https://automattic.com ; Privacy Policy: https://automattic.com/privacy .
  • UpdraftPlus: backup software and backup storage; Service Provider: Simba Hosting Ltd., 11, Barringer Way, St Neots, Cambs., PE19 1LW, UK; Website: https://updraftplus.com/ ; Privacy Policy: https://updraftplus.com/data-protection-and-privacy-centre/ .

Rights of data subjects

As a data subject, you have various rights under the GDPR, which result in particular from Art. 15 to 21 GDPR:

  • Right of objection: You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Article 6 Paragraph 1 lit. e or f GDPR; this also applies to profiling based on these provisions. If the personal data concerning you is processed in order to operate direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
  • Right of withdrawal for consent: You have the right to withdraw your consent at any time.
  • Right to information: You have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and a copy of the data in accordance with legal requirements.
  • Right to rectification: In accordance with legal requirements, you have the right to request the completion of the data concerning you or the correction of incorrect data concerning you.
  • Right to erasure and restriction of processing: You have the right, in accordance with the legal requirements, to request that the data concerning you be deleted immediately, or alternatively to request a restriction of the processing of the data in accordance with the legal requirements.
  • Right to data portability: You have the right to receive the data that you have provided to us in accordance with the legal requirements in a structured, common and machine-readable format or to request that it be transmitted to another person responsible.
  • Complaint to supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement, if you believe that the processing of data concerning you personal data violates the provisions of the GDPR.

definitions of terms

This section provides you with an overview of the terms used in this data protection declaration. Many of the terms are taken from the law and defined above all in Art. 4 GDPR. The legal definitions are binding. The following explanations, on the other hand, are intended primarily for understanding. The terms are sorted alphabetically.

  • Personal data: „Personal data“ means any information relating to an identified or identifiable natural person (hereinafter „data subject“); an identifiable natural person is one who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or one or more special features, are an expression of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  • Responsible: The „responsible person“ is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data.
  • Processing: „Processing“ is any operation or series of operations carried out with or without the aid of automated procedures in connection with personal data. The term goes far and covers practically every handling of data, be it collection, evaluation, storage, transmission or deletion.
Legal text by Dr.  Schwenke - please click for further information.