DATA PROTECTION
General information on handling your data
The following notes give you information about the type, scope and purpose of the collection, use and processing of personal data on my website:
1. Responsible body - contact
1.1. Responsible body within the meaning of the Data Protection Act
Responsible body within the meaning of Art. 4 Para. 7 EU General Data Protection Regulation (GDPR) is:
Meike Oetken
Wiesenstieg 4
22303 Hamburg
Email address: meike.oetken@gmail.com
Telephone number: 0160 - 801 2 801
Contact person: Meike Oetken
1.2. Contact
a) If you have any questions about data protection, or would like to exercise rights or claims regarding your personal data, you can contact me using the contact options given above (section 1.1.) and my contact form.
b) In my contact and customer feedback form, you must provide mandatory information to answer your request (e.g. your e-mail address, your name). I need the information to process your request and to be able to contact you. You can fill out the other fields voluntarily.
c) When you contact us (e.g. by telephone, e-mail, contact form, feedback form), your details for processing the request and in the event that follow-up questions arise will be stored in accordance with Article 6 (1) (b) GDPR. I delete the data arising in this context after the storage is no longer necessary, or restrict the processing if there are legal storage obligations (see "Deletion and retention periods of your data", Section 14).
2. Data processed by me
2.1. legal bases
a) Personal data can be processed every time you visit my website. Your personal data will only be processed if it is permitted by law (legal basis). According to Art. 6 Para. 1 DSGVO, this is the case if
-
you have given us your consent, or
-
the processing is necessary for the performance of our contract with you, or
-
in the event of an inquiry by you, pre-contractual measures are required, or
-
the processing is necessary for, your vital interests, or
-
to protect that of another natural person, or
-
the processing is necessary to protect my legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, prevail (balancing of interests).
b) The personal data collected from you will be deleted as soon as the purpose of the collection no longer applies (see "Deletion and retention periods of your data", Section 14).
2.2. What is personal data?
a) Article 4 of the General Data Protection Regulation (GDPR) defines what “personal data” is. According to this, personal data is such information that can be assigned to your person with reasonable means. Personal data are divided into four groups. This includes inventory data (e.g. names and addresses of customers), contract data (e.g. services used, names of clerks, payment information), usage data (e.g. the websites of our online offer visited, interest in our products) and content data (e.g. input in the context of e-mails). Information that cannot be assigned to a specific or identifiable person or can only be assigned with a disproportionate amount of time, cost and effort is anonymous data that is not personal.
b) When you visit my website, other data is also processed for technical reasons. This is mainly technical information such as e.g. B. the IP address that your Internet access provider assigns to your computer when connecting to the Internet, or information about the Internet site from which you accessed our offer, or about the type and version of the Internet you are using -browser. However, this also includes login data, your operating system, download errors, the length of visits to certain pages, and any telephone numbers from which you call my customer service number. This technical information may be personally identifiable information in individual cases. As a rule, however, I only use technical information to the extent that this is necessary for technical reasons for the operation and protection of my website from attacks and misuse in accordance with Article 6 (1) (f) GDPR.
2.3. What is "Processing?"
What is meant by "processing" also results from Art. 4 of the General Data Protection Regulation (GDPR). This includes all processes involved in handling the data. Even the collection or recording, but also the organization or ordering or storage, adaptation or change fall under the term "processing". But other ways of dealing with it, such as the actual use, or the transmission or disclosure also fall under the generic term of processing. Ultimately, this also includes the restriction, deletion or destruction of data.
3. data security
The security of your personal data has a very high priority for me. I therefore protect your data stored with me through technical and organizational measures. This ensures that the provisions of the data protection laws are observed and that loss or misuse by third parties is effectively prevented. In particular, my employees who process personal data are committed to data secrecy and must comply with this.
4. SSL encryption
My website uses secure SSL encryption when it comes to the transmission of personal data or personal content from my users. Please make sure that SSL encryption is activated on your side for corresponding activities. The use of encryption is easy to recognize: the display in your browser line changes from "http://" to "https://". Data encrypted via SSL cannot be read by third parties. Therefore, only transmit your confidential information if SSL encryption is activated and if in doubt, contact me.
5. Collection of personal data when visiting my website
a) If you only use the website for informational purposes, i.e. if you do not register or otherwise provide me with information, I only collect the personal data that your browser transmits to my server. If you want to view my website, I collect the following data that is technically necessary for me to show you my website and to ensure stability and security (legal basis is Art. 6 Para. 1 Sentence 1 lit. f GDPR):
-
the IP address of the requesting device (i.e. your computer or smartphone),
-
Date and time my website was accessed,
-
Keywords you used to find my site
-
Time zone difference to Greenwich Mean Time (GMT),
-
Content of the request (specific page),
-
access status/ http status code,
-
the amount of data transferred, the website from which access is made (referrer URL),
-
operating system and its interface,
-
as well as the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
b) The aforementioned data will be stored for a maximum of seven days for security reasons (e.g. to investigate misuse or fraud) and then deleted. Data whose further storage is required for evidence purposes are excluded from deletion until the respective incident has been finally clarified.
c) In addition to the aforementioned data, cookies are stored on your computer when you use my website. You can find more detailed information on cookies under Section 10 (“Cookies”).
d) The data is collected by me on the basis of my legitimate interests within the meaning of Article 6 (1) (f) GDPR. Under no circumstances do I use the collected data for the purpose of drawing conclusions about your person. The purposes I pursue include in particular:
-
ensuring a smooth connection to the website,
-
ensuring comfortable use of my website,
-
the clarification of abuse or fraudulent activities,
-
the evaluation of system security and stability as well as
-
other administrative purposes.
6. Disclosure of data to third parties and third party providers
a) Data will only be passed on to third parties within the framework of legal requirements. I only pass on user data to third parties if:
-
you have given your express consent in accordance with Art. 6 Para.1 S.1 lit.a GDPR,
-
the transfer according to Art.6 Abs.1 S.1 lit.f DSGVO is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
-
in the event that there is a legal obligation for the transfer according to Art.6 Para.1 S.1 lit.c DSGVO, as well as
-
this is legally permissible and required for the processing of contractual relationships with you according to Art.6 Para.1 S.1 lit.b DSGVO.
b) When passing on your personal data, I always ensure the highest possible level of security. Therefore, your data will only be passed on to previously carefully selected and contractually obliged service providers and partner companies in order to ensure that personal data is protected in accordance with the relevant statutory provisions.
c) I draw your attention to the fact that in addition to this data protection declaration, the data protection guidelines and declarations of the locally responsible partners and their authorized institutions may also apply.
d) Personal data will be passed on in particular if you commission me to do so as part of the contractual or user relationship. This includes, for example, the use of support services arranged by me in the context of creating an exposé. Even if you commission us to provide a digital energy consultant, data will be passed on to the corresponding energy consultants.
7. Where is your personal data stored?
a) The personal data I collect about you is generally stored within the European Union (“EU”). In exceptional cases, however, personal data may be transferred to non-European countries. In these so-called “third countries”, the GDPR is not directly applicable law. As a rule, there is also less strict data protection law there.
b) Such data transfer to countries outside the European Economic Area may occur, for example, when processing a service request or providing support services electronically.
c) In the case of such a transfer of data to a third country, however, I ensure that this takes place in accordance with this data protection declaration. In addition, I ensure that the respective recipient in the third country guarantees an appropriate level of data protection for you and other data subjects or that there is otherwise legal permission. This is done e.g. B. by concluding a contract with the recipient in the third country on the basis of the so-called standard contractual clauses of the European Commission. These standard contractual clauses ensure a level of data protection similar to that offered by the European General Data Protection Regulation.
8. Execution of contracts
In accordance with Article 6 (1) (b) GDPR, personal data will continue to be collected and processed if you provide it to me to implement a user relationship, contract or as part of the initiation of a contractual or user relationship. Which data is collected can be seen from the respective input forms or communicated in the context of the request. I save and use the data you provide to process the contract. After the contract or user relationship has been completed, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or a legally permitted further use of data was reserved by me, about which I will inform you accordingly below.
9. cookies
a) I use so-called "cookies" to recognize repeated use of my offer by the same user or internet connection owner. Cookies are small text files that are stored by the web browser on the user's end device to store certain information.
b) If the user gives his consent to the use of cookies, the lawfulness of the data processing is based on Article 6 Paragraph 1 Clause 1 Letter a GDPR. If no consent is requested, my legitimate interest (ie interest in the analysis, optimization and economic operation of this website and services) within the meaning of Article 6 Paragraph 1 Sentence 1 lit. f GDPR provides the legal basis for the use of cookies represent.
c) Depending on their purpose and function, the cookies used by the website are divided into the following categories: Strictly necessary cookies; functional cookies; performance cookies; Marketing / third party / consent cookies.
Strictly necessary cookies ensure that this website or the service works properly. Functional cookies enable this website to store information such as B. the user name or the language selection, and to offer the user improved and personalized functions based on this. These cookies only collect and store anonymous information. Performance cookies collect information about how our website is used in order to improve its attractiveness, content and functionality. Marketing / third party / consent cookies come from external advertising companies, among others, and are used to collect information about the websites visited by the user.
d) Strictly necessary cookies cannot be deactivated or activated individually. The user has the option at any time to adjust his cookie settings or to generally deactivate cookies in his browser. The user can object to the use of functional cookies, performance cookies or marketing cookies at any time by adjusting his cookie settings accordingly. However, the exclusion of cookies can lead to functional restrictions of this online offer. Information on how to disable cookies in the most common browsers can be found under the following links:
-
Google Chromehttps://support.google.com/accounts/answer/61416hl=en
-
Microsoft Internet Explorerhttps://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
-
safarihttps://support.apple.com/kb/PH19214?locale=de_DE&viewlocale=de_DE
10. Inclusion of third-party content
10.1. Google Analytics
a) I use Google Analytics, a web analytics service provided by Google Inc. (“Google”), 1600 Amphitheater Parkway Mountain View, CA 94043, USA, for the purpose of tailoring my website to meet your needs and continually optimizing it.
b) I have concluded an order data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
c) The use of Google Analytics is based on my legitimate interests within the meaning of Article 6 (1) (f) GDPR. I use Google Analytics to analyze and regularly improve the use of my website. I can use the statistics obtained to improve my offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield and thus offers a guarantee to comply with European data protection law https://www.privacyshield.gov/EU-US-Framework.
d) I also use Google Analytics for a cross-device analysis of visitor flows, which is carried out using a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".
e) I use Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are further processed in abbreviated form, which means that they cannot be linked to individuals. If the data collected about you has a personal reference, this will be excluded immediately and the personal data will be deleted immediately.
f) I use the "demographic characteristics" function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the point "Objection to data collection".
g) Google Analytics uses so-called "cookies", text files which are stored on your computer and which enable an analysis of your use of the website (see "Cookies" section 10). The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.
h) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
i) You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by using the browser plug-in available under the following link download and install: http://tools.google.com/dlpage/gaoptout?hl=de.
j) You can find out more information about the use of data for advertising purposes by Google, setting and objection options on the Google websites:
-
Data usage by Google http://www.google.com/analytics/terms/de.html
-
Use of data for advertising purposes http://www.google.com/policies/technologies/ads
-
To data protection https://marketingplatform.google.com/about/analytics/terms/de/
-
Privacy statementhttp://www.google.de/intl/de/policies/privacy
11. Your rights to your data
You have the following rights to the data you process:
-
According to Art. 15 GDPR you can request information about your personal data processed by me. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data was or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right to complain, request the origin of your data if it was not collected from me, and the existence of automated decision-making including profiling and, if necessary, meaningful information about their details;
-
According to Art. 16 DSGVO you can immediately request the correction of incorrect or completion of your personal data stored by me;
-
In accordance with Art. 17 GDPR, you can request the deletion of your personal data stored by me, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims is required;
-
According to Art. 18 GDPR you can restrict the processing of your request personal data if you dispute the accuracy of the data, the processing is unlawful, but you refuse to delete it and I no longer need the data, but you need them to assert, exercise or defend legal claims or you pursuant to Art. 21 GDPR you have objected to the processing;
-
In accordance with Art. 20 GDPR, you have the right to data transfer, i.e. to receive your personal data that you have provided to me in a structured, common and machine-readable format or you can request transmission to another person responsible, provided that the processing is based on your consent or a contract with me and the processing was carried out using automated procedures. In the case of data transfer to another person responsible, however, you can only effect the transfer to the extent that this is technically feasible;
-
According to Art. 7 Para. 3 DSGVO you can revoke your consent at any time. As a result, I am no longer allowed to continue the data processing based on this consent for the future; and
-
According to Art. 77 GDPR you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or my registered office.
A simple message to me is sufficient for your rights to correction or deletion of personal data, for your request for information, the revocation of consent or for an objection. There are no costs for you to exercise your rights. You can contact me at the addresses listed in section 1.1. Contact the contact information provided in this privacy policy.
12. right to object
a) If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the admissibility of the processing of your personal data after you have given it to me.
b) If I base the processing of your personal data on the balancing of interests, you can object to the processing. If you exercise such an objection, please explain the reasons why I should not process your personal data as I have done. In the event of your justified objection, I will check the situation and will either stop or adjust the data processing or show you my compelling reasons worthy of protection, on the basis of which I will continue the processing. I will inform you of such compelling reasons. You have the right to complain to a supervisory authority at any time (e.g. the supervisory authority at your place of residence or at my company’s headquarters).
c) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform me about your objection to advertising using the contact details specified in Section 1.1.
d) If you would like to exercise your right of revocation or objection, it is sufficient to send an e-mail to the number 1.1. named person.
13. Deletion and retention periods of your data
a) The data stored by me will be deleted as soon as they are no longer required for the intended purpose. You can find details on this under the points in this declaration in which the type and purpose of the respective processing of the personal data are explained.
b) Data that I have to store due to legal, statutory or contractual storage obligations (e.g. for tax reasons) will be blocked instead of being deleted in order to prevent use for other purposes. This includes, for example, storage for 6 years in accordance with Section 257 (1) HGB (for trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) or storage for 10 years in accordance with Section 147 (1) AO (books, records , management reports, accounting documents, commercial and business letters, documents relevant to taxation, etc.).
14. Privacy Policy Changes
a) This data protection declaration is currently valid and has the status of January 2022.
b) Due to changes in the law or adjustments in data processing, updates to this data protection information may become necessary. I therefore recommend that you inform yourself regularly about changes on this page. If the change affects your consent or the provisions of the contractual relationship, this will only take place with your consent. I will contact you separately for this.