Legal Notice and Privacy Policy

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data comprises all data that can be used to identify you personally. Detailed information about data protection can be found in the privacy policy below.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the section “Information about the controller” in this privacy policy.

How do we collect your data?

Some data is collected when you provide it to us. This may include, for example, data that you enter in a contact form.

Other data is collected automatically or after you have given your consent when you visit the website. This primarily comprises technical data, such as the browser, operating system or time of access. This data is collected automatically as soon as you enter the website.

What do we use your data for?

Some data is collected to ensure that the website is provided correctly. Other data may be used to analyse user behaviour. If contracts can be concluded or initiated through the website, submitted data will also be processed for contractual offers, orders or other enquiries.

What rights do you have regarding your data?

You have the right at any time to receive information, free of charge, about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have consented to data processing, you may withdraw this consent at any time with effect for the future. Under certain circumstances, you also have the right to request that the processing of your personal data be restricted. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time if you have further questions about data protection.

Statistical analysis by Webador

Webador provides us with privacy-friendly website visitor statistics. According to Webador, IP addresses are anonymised. We have not connected a separate Google Analytics account to this website. Further information can be found in the section “Technically necessary cookies, server logs and Webador statistics”.

2. Hosting

We host the content of this website with the following provider:

External hosting

This website is hosted externally. Personal data collected on this website is stored on the servers of the hosting provider. This may include IP addresses, contact enquiries, metadata and communication data, contract data, contact details, names, website access data and other data generated through the website.

External hosting is used for the purpose of fulfilling contracts with potential and existing customers pursuant to Article 6(1)(b) GDPR and in our legitimate interest in providing a secure, fast and efficient online service through a professional provider pursuant to Article 6(1)(f) GDPR. Where consent has been requested, processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device. Consent may be withdrawn at any time.

Our hosting provider processes your data only to the extent necessary to fulfil its contractual obligations and follows our instructions regarding this data.

We use the following hosting provider:

Webador / JouwWeb B.V.
Torenallee 20
5617 BC Eindhoven
The Netherlands

Data processing agreement

We have concluded a data processing agreement with the provider named above. This legally required agreement ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with statutory data-protection regulations and this privacy policy.

When you use this website, various types of personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect, how we use it and for what purpose.

Please note that data transmitted over the internet, such as email communications, may be subject to security vulnerabilities. Complete protection against access by third parties is not possible.

Information about the controller

The controller responsible for data processing on this website is:

DressenHeims Unternehmensberatung GmbH
Rosental 5
80331 Munich
Germany

Telephone: +49 170 5650123
Email: m.dressen@dressenheimsunternehmensberatungsgmbh.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names and email addresses.

Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for processing no longer applies. If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for retaining it, such as retention periods under tax or commercial law. In the latter case, the data will be deleted once these reasons no longer apply.

General information about the legal basis for data processing

Where you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR if special categories of personal data are processed. In the event of express consent to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR. Where you have consented to cookies being stored or to access to information on your device, processing is additionally based on Section 25(1) TDDDG. Consent may be withdrawn at any time.

If your data is required for the performance of a contract or for pre-contractual measures, we process it on the basis of Article 6(1)(b) GDPR. We also process data where this is necessary to comply with a legal obligation under Article 6(1)(c) GDPR. Processing may also be based on our legitimate interests pursuant to Article 6(1)(f) GDPR. The applicable legal basis in each individual case is explained in the following sections.

Recipients of personal data

In the course of our business activities, we cooperate with various external organisations. In some cases, it is necessary to transmit personal data to these organisations. We disclose personal data only when this is necessary to fulfil a contract, when we are legally obliged to do so, when we have a legitimate interest pursuant to Article 6(1)(f) GDPR or when another legal basis permits disclosure. When using data processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement. In the event of joint processing, an agreement governing joint processing is concluded.

Withdrawal of consent to data processing

Many data-processing operations are possible only with your express consent. You may withdraw consent at any time. The lawfulness of processing carried out before withdrawal remains unaffected.

Right to object to data collection in specific cases and to direct marketing (Article 21 GDPR)

IF DATA IS PROCESSED ON THE BASIS OF ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE APPLICABLE LEGAL BASIS CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES.

Right to lodge a complaint with the competent supervisory authority

In the event of a breach of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work or the location of the alleged infringement. This right is without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfilment of a contract in a commonly used, machine-readable format, or to have it transferred to a third party. Direct transfer to another controller will take place only where technically feasible.

Access, rectification and deletion

Within the scope of applicable legislation, you have the right at any time to receive information, free of charge, about your stored personal data, its origin and recipients, and the purpose of processing. Where applicable, you also have the right to have this data corrected or deleted. You may contact us at any time if you have further questions about personal data.

Right to restriction of processing

You have the right to request that the processing of your personal data be restricted. You may contact us at any time for this purpose. The right to restriction applies in the following cases:

• If you dispute the accuracy of your personal data stored by us, we generally need time to verify it. During the verification period, you have the right to request restriction of processing.
• If the processing of your personal data was or is unlawful, you may request restriction of processing instead of deletion.
• If we no longer need your personal data but you require it to exercise, defend or establish legal claims, you have the right to request restriction of processing instead of deletion.
• If you have objected pursuant to Article 21(1) GDPR, your interests must be balanced against ours. While it has not yet been determined whose interests prevail, you have the right to request restriction of processing.

If you have restricted the processing of your personal data, such data may – apart from storage – be processed only with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries submitted to us, this website uses SSL or TLS encryption. You can recognise an encrypted connection when the browser address changes from “http://” to “https://” and a padlock symbol appears in the browser bar.

When SSL or TLS encryption is enabled, data that you transmit to us cannot be read by third parties.

4. Data collection on this website

Technically necessary cookies, server logs and Webador statistics

Webador uses technically necessary or functional cookies to ensure that the website operates correctly. These may include the cookies “JWSESSION”, “JwStickySession” and “JwUnsafe”. “JWSESSION” is used only for the duration of the browser session. “JwStickySession” stores selected products when a wish-list function is used; this website does not use that function. “JwUnsafe” is used to identify the owner of the website.

These technically necessary functions are used on the basis of Section 25(2)(2) TDDDG. Insofar as personal data is processed, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional provision of this website.

Webador also creates server logs that may contain visitors’ IP addresses. These logs are used for troubleshooting and to ensure technical operation and, according to Webador, are deleted after 30 days.

Webador provides us with statistical information about website use. According to the provider, IP addresses are anonymised and Google is not permitted to use the data for other services. We have not connected a separate Google Analytics account to this website. Insofar as personal data is processed, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in statistically evaluating and improving our website.

Contact form

When you submit an enquiry through our contact form, the information entered in the form, including your contact details, is stored for the purpose of processing the enquiry and any follow-up questions. Entries are stored in the Webador system and additionally sent to the email account configured for this website. We do not disclose this data without your consent.

This data is processed on the basis of Article 6(1)(b) GDPR where the enquiry relates to the performance of a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling enquiries pursuant to Article 6(1)(f) GDPR or on your consent pursuant to Article 6(1)(a) GDPR where consent has been requested. Consent may be withdrawn at any time.

The data entered in the contact form remains with us until you request its deletion, withdraw your consent to storage or the purpose for storing it no longer applies, for example after your enquiry has been fully processed. Mandatory statutory provisions, particularly retention periods, remain unaffected. Form entries that are no longer required are regularly deleted from both the Webador system and the email account.

5. Plugins and tools

Google Fonts provided through Webador

This website uses Google Fonts to ensure consistent typography. According to Webador, fonts for German customers are delivered through Webador’s own proxy server. When you visit this website, no direct connection is therefore established between your browser and Google’s servers, and your IP address is not transmitted to Google in connection with displaying these fonts.

The fonts are provided on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the technically secure and consistent presentation of the website.

Source of the original German text: eRecht24; supplemented and adapted to the Webador configuration used on this website.