Data protection

Welcome on our websites. In the following, please find some information on how we handle your data pursuant to Art. 13 General Data Protection Regulation (GDPR).

Data controller

Responsibility for the collection and processing of data described below is the body named under ‘Company details’.

Utilization data

When you visit our websites, so-called usage data is temporarily stored on our web server for statistical purposes as a log in order to improve the quality of our websites. This data record consists of

the page which requested the file,
the name of the file,
date and time of the request,
the data volume transmitted,
the access status (file transmitted, file not found)
the description of the type of web browser used,
the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established.

The above log data is stored anonymised only.

Data transmission to third parties

In the frame of data processing on our behalf according to Art. 28 GDPR, we transfer your data to service providers who support us in the operation of our websites and the associated processes. Our service providers are strictly bound to our instructions and have signed the respective contractual commitments. They are for example providers offering hosting or web analyses.

Data transmission to third countries

We transmit some of the personal data to a third country outside of the EU. In this process, we ensured an adequate level of data protection in each case:

In the case of Google (USA), an adequate level of data protection is based on the participation in the Privacy Shield agreement (Art. 45 para. 1 GDPR).

Cookies

We use cookies on our websites. Cookies are small text files which can be stored and read our on your end device. A distinction is made between session cookies, which are deleted again as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. Cookies may contain data that make it possible to recognize the device used. In some cases, however, cookies only contain information on certain settings that cannot be related to individuals.

We use session cookies and permanent cookies on our websites.

You can set your browser so that it informs you about the placement of cookies. This makes the use of cookies transparent for you. By means of the corresponding browser setting, you can also delete cookies at any time and prevent the setting of new cookies. Please note that in this case, our web pages may not be displayed optimally and that some functions may no longer be technically available.

Google Analytics

We use the web analysis tool "Google Analytics" to ensure that the design of our websites matches the user's requirements. Google Analytics generates user profiles based on aliases. For this, we store permanent cookies on your end device which we can read later. This allows us to count the visitors to our website, and to recognize you when you visit our website next time.

In the frame of visitor number counting, we furthermore use the following functions:

We augment the alias data with other data provided to us by external providers. This allows us to identify demographic features of our visitors to draw conclusions e.g. on their age, sex, and place of residence.

If you declared your consent via the banner on our website, we will process your data according to Art. 6 para. 1 sentence 1 lit. a GDPR (General Data Protection Regulation). You may withdraw your consent at any time. To do so, please follow this link and make the respective settings via our banner.

In the frame of Google Analytics, Google supports us as a processor in the sense of Art. 28 GDPR. Data processing may also take place outside of the EU or the EEA. An adequate level of data protection by Google pursuant to Art. 45 para. 1 GDPR can be assumed in view of Google's participation in the Privacy Shield Agreement, and in view of Google's adoption of standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR.

Data security

We take technical and organisational measures to protect you data as comprehensively as possible from unauthorised access. We use an encryption process on our websites. Your data is transmitted from your computer to our server and vice versa via the Internet by means of TLS encryption. You can recognize this by the fact that the lock symbol in the status bar of your browser is closed and the address line starts with  

Embedded YouTube videos

On some sub-sites, YouTube videos are embedded in our websites. When you call these sub-sites up, YouTube contents will be uploaded. In this context, YouTube will also receive your IP address which is technically required to call up the contents. We generally have no influence on the way YouTube handles its further processing. However, when embedding the videos we made sure to enable the extended data protection mode offered by YouTube.

Contact form

You have the possibilty to contact us via online contact form. In order to use this contact form we need your name and your e-mail address. You may enter further details, but this is not mandatory.

Your rights as a user

In respect of the processing of your personal data, the GDPR grants you as a user of the website certain rights:

1. Right of access by the data subject (Art. 15 GDPR):

You have the right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the information listed in detail in Art. 15 GDPR.

2. Right to rectification and erasure (Art. 16 and 17 GDPR):

You have the right to obtain from the controller without undue delay the rectification and if applicable completion of inaccurate personal data concerning yourself.

You also have the right to obtain from the controller the erasure of personal data concerning yourself without undue delay where one of the grounds listed in detail in Art. 17 GDPR applies, e.g. If the data is no longer required for the purposes pursued.

3. Right to restriction of processing (Art. 18 GDPR):

You have the right to obtain from the controller restriction of processing where one of the preconditions listed in Art. 18 GDPR applies, e.g. if you objected against the processing, for a period enabling the controller to carry out a respective verification.

4. Right to data portability (Art. 20 GDPR):

In certain cases listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning yourself in a structured, commonly used and machine-readable format and have the right to demand transmission of this data to a third party.

5. Right to object (Art. 21 GDPR):

If data is collected on the basis of Art. 6 para. 1 lit. f (data processing for the protection of legitimate interests), you are entitled to object to the processing at any time for reasons arising from your particular situation. In this case, we will no longer process the personal data unless there are demonstrably compelling reasons worthy of protection for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

6. Right to lodge a complaint with a supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of data concerning you is in breach of data protection legislation. The right to lodge a complaint may be exercised in particular before a regulatory authority in the member state of you residence or workplace, or in the place where the alleged breach occurred.

Contact data of the Data Security Officer

Our company Data Security Officer is at your availability for any information or suggestions regarding data protection:

datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Web: www.datenschutz-nord-gruppe.de
Email: office@datenschutz-nord.de