Privacy policy

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means any data by which you can be personally identified. Detailed information on data protection can be found in our privacy policy set out below this text.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator’s contact details in this website’s legal notice.

How do we collect your data?

Some of your data is collected when you provide it to us. This may, for example, include data you enter in a contact form.

Other data is collected by our IT systems automatically or following your consent when you visit the website. This primarily comprises technical data (e.g. your internet browser, operating system or the time the page was accessed). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to obtain, free of charge, information about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. If you have given consent to data processing, you may withdraw that consent at any time with effect for the future. You also have the right, under certain circumstances, to request restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time at the address given in the legal notice regarding these matters or any other questions about data protection.

Analytics tools and third-party tools

When you visit this website, your browsing behaviour may be statistically evaluated. This is primarily carried out using so-called analytics programmes.

Detailed information about these analytics programmes can be found in the following privacy policy.

1. Hosting and content delivery networks (CDN)

External hosting

This website is hosted by an external service provider (hosting provider). The personal data collected on this website is stored on the hosting provider’s servers. This may include, in particular, IP addresses, contact enquiries, metadata and communication data, contract data, contact details, names, website visits and other data generated via a website.

The hosting provider is used for the purpose of performing contracts with our prospective and existing customers (Art. 6(1)(b) GDPR) and in the interest of the secure, fast and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).

Our hosting provider will process your data only to the extent necessary to fulfil its service obligations and will follow our instructions regarding this data.

We use the following hosting provider:

Wix

Conclusion of a data processing agreement

To ensure processing in compliance with data protection requirements, we have concluded a data processing agreement with our hosting provider.

1. General information and mandatory disclosures

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy.

When you use this website, various personal data is collected. Personal data means data by which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmission over the internet (e.g. when communicating by email) may have security vulnerabilities. It is not possible to provide complete protection of data against access by third parties.

Information about the controller

The controller responsible for data processing on this website is:

Farid Kaddurah

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses or similar).

Retention period

Unless a more specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for processing it no longer applies. If you make a valid request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible grounds for retaining your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be erased once those grounds no longer apply.

Information about data transfers to the USA

Our website incorporates, among other things, tools from companies based in the USA. When these tools are active, your personal data may be transferred to the respective companies’ US servers. Please note that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to disclose personal data to security authorities without you, as a data subject, being able to take legal action against this. It therefore cannot be ruled out that US authorities (e.g. intelligence services) may process, analyse and permanently store your data held on US servers for surveillance purposes. We have no influence over these processing activities.

Withdrawal of your consent to data processing

Many data processing operations are possible only with your express consent. You may withdraw consent you have already given at any time. Withdrawal does not affect the lawfulness of data processing carried out before the withdrawal.

Right to object to data collection in particular circumstances and to direct marketing (Art. 21 GDPR)

WHERE DATA PROCESSING IS BASED ON ART. 6(1)(e) OR (f) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE APPLICABLE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).

WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data which we process by automated means on the basis of your consent or in performance of a contract provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will be carried out only where technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the padlock symbol in your browser bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Access, erasure and rectification

Within the scope of the applicable statutory provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, its origin and recipients and the purpose of its processing and, where applicable, the right to rectification or erasure of this data. You may contact us at any time at the address given in the legal notice regarding these matters or any other questions about personal data.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data. You may contact us about this at any time at the address given in the legal notice. The right to restriction of processing applies in the following cases:

1. If you contest the accuracy of your personal data stored by us, we generally require time to verify this. For the duration of the verification, you have the right to request restriction of the processing of your personal data.

2. If the processing of your personal data was or is unlawful, you may request restriction of processing instead of erasure.

3. If we no longer need your personal data, but you require it for the exercise, defence or establishment of legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.

4. If you have lodged an objection under Art. 21(1) GDPR, your interests must be weighed against ours. Until it has been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data may, with the exception of storage, be processed only with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.

Objection to marketing emails

We hereby object to the use of contact details published as part of the statutory legal notice requirement for sending advertising and information materials that have not been expressly requested. The website operators expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example by spam emails.

1. Data collection on this website

Cookies

Our websites use so-called “cookies”. Cookies are small text files and do not cause any harm to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted after your visit ends. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your device when you enter our site (third-party cookies). These enable us or you to use certain services provided by the third-party company (e.g. cookies for processing payment services).

Cookies serve various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or displaying videos). Other cookies are used to analyse user behaviour or display advertising.

Cookies required for carrying out electronic communications (necessary cookies), for providing certain functions you have requested (functional cookies, e.g. for the shopping basket function) or for optimising the website (e.g. cookies for measuring website audiences) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies to provide its services in a technically error-free and optimised manner. Where consent to the storage of cookies has been requested, the cookies concerned are stored exclusively on the basis of that consent (Art. 6(1)(a) GDPR); consent may be withdrawn at any time.

You can configure your browser to inform you when cookies are set and to permit cookies only in individual cases, to exclude the acceptance of cookies in particular cases or generally, and to enable automatic deletion of cookies when you close your browser. Disabling cookies may restrict the functionality of this website.

Where cookies from third-party companies or cookies for analytics purposes are used, we will inform you separately within this privacy policy and, where applicable, request your consent.

Cookie consent

If you have any questions about the storage of cookies on this site, please contact the service provider.

Restoring Trust in Digital

The legal basis for this is Art. 6(1), first sentence, point (c) GDPR.

Contact form

If you send us enquiries using the contact form, we will store the information you provide in the enquiry form, including the contact details you enter there, for the purpose of handling the enquiry and any follow-up questions. We will not disclose this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary in order to take pre-contractual steps. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where this has been requested.

The data you enter in the contact form will remain with us until you request its erasure, withdraw your consent to its storage or the purpose for retaining the data no longer applies (e.g. once your enquiry has been fully handled). Mandatory statutory provisions, in particular retention periods, remain unaffected.

Enquiries by email, telephone or fax

If you contact us by email, telephone or fax, your enquiry, including all personal data arising from it (name, enquiry), will be stored and processed by us for the purpose of handling your request. We will not disclose this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary in order to take pre-contractual steps. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where this has been requested.

The data you send us through contact enquiries will remain with us until you request its erasure, withdraw your consent to its storage or the purpose for retaining the data no longer applies (e.g. once your request has been fully handled). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

1. Analytics tools and advertising

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. The website operator receives various usage data, such as page views, time spent on the site, operating systems used and the user’s origin. Google may compile this data into a profile assigned to the respective user or their device.

Google Analytics uses technologies that enable users to be recognised for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.

This analytics tool is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. Where the corresponding consent has been requested (e.g. consent to the storage of cookies), processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent may be withdrawn at any time.

The transfer of data to the USA is based on the European Commission’s standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymisation

We have enabled IP anonymisation on this website. This means that Google truncates your IP address within Member States of the European Union or other contracting states to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of this website’s operator, Google will use this information to evaluate your use of the website, compile reports on website activity and provide the website operator with other services relating to website use and internet use. The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data.

Browser plugin

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Further information about how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Processing on behalf of the controller

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographics in Google Analytics

This website uses the “demographics” function of Google Analytics to display appropriate advertisements to website visitors within the Google advertising network. This enables reports to be generated containing information about visitors’ age, gender and interests. This data originates from Google’s interest-based advertising and visitor data from third-party providers. This data cannot be attributed to any specific individual. You can disable this function at any time in the advertising settings of your Google account, or generally prohibit the collection of your data by Google Analytics as described under “Objection to data collection”.

Retention period

User-level and event-level data stored by Google that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymised or deleted after 26 months. Details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=de

1. Plugins and tools

YouTube with enhanced privacy

This website embeds YouTube videos. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.

We use YouTube in privacy-enhanced mode. According to YouTube, this mode means that YouTube does not store information about visitors to this website before they watch the video. However, privacy-enhanced mode does not necessarily prevent data from being shared with YouTube partners. YouTube therefore establishes a connection to the Google DoubleClick network regardless of whether you watch a video.

As soon as you start a YouTube video on this website, a connection to YouTube’s servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, once a video has started, YouTube may store various cookies on your device or use comparable recognition technologies (e.g. device fingerprinting). This enables YouTube to obtain information about visitors to this website. This information is used, among other things, to compile video statistics, improve user-friendliness and prevent attempted fraud.

Starting a YouTube video may also trigger further data processing operations over which we have no influence.

YouTube is used in the interest of presenting our online services in an appealing way. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Where the corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent may be withdrawn at any time.

Further information about data protection at YouTube can be found in its privacy policy at: https://policies.google.com/privacy?hl=de.

Google Web Fonts (local hosting)

This site uses so-called web fonts provided by Google to ensure consistent font presentation. Google Fonts are installed locally. No connection to Google’s servers is established in this process.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

e-recht24.de

This privacy policy was created with the assistance of e-recht24.de.