Data protection

Thank you for visiting our website. The secure handling of your data is particularly important to us. We would therefore like to provide you with detailed information about how your data is used when you visit our website.

Legal basis for processing
Art. 6 para. 1 lit. a GDPR serves as the legal basis for our company for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, with processing operations necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Art. 6 para. 1 lit. b GDPR. The same applies to processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 para. 1 lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person, Art. 6 para. 1 lit. d GDPR. Ultimately, processing operations could also be based on Art. 6 para. 1 lit. f GDPR. Processing operations that are not covered by any of the above legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights, and freedoms of the data subject do not prevail.

Right to information, right to correction, blocking, deletion, objection
Upon written request, we will inform you about the data we have stored about you. You also have the right to correct, block, object to, or delete this data. The request must be sent to the address given in the legal notice on our website.

Transfer of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only transfer your personal data to third parties if:

You have given your express consent to this in accordance with Art. 6 (1) (a) GDPR
the transfer is necessary for the establishment, exercise, or defense of legal claims pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
this is legally permissible and necessary for the performance of contractual relationships with you pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.

Rights of data subjects
You have the right:

pursuant to Art. 15 GDPR, to request information about your personal data processed by me. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if it was not collected by me, and the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details;
pursuant to Art. 16 GDPR, to request the immediate correction of inaccurate or incomplete personal data stored by me;
pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by me, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful, but you oppose its erasure and we no longer need the data, but you need it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 GDPR, to receive your personal data that you have provided to me in a structured, commonly used and machine-readable format or to request its transfer to another controller;
pursuant to Art. 7 (3) GDPR, to revoke your consent to me at any time. As a result, we will no longer be allowed to continue processing the data based on this consent in the future; and
pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the place of the alleged infringement if the data subject believes that the processing of personal data concerning them violates the EU General Data Protection Regulation (GDPR).

Right of withdrawal
If your personal data is processed on the basis of legitimate interests, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which I will implement without you having to specify a particular situation. If you wish to exercise your right of withdrawal or objection, simply send an email to the address given in the legal notice on our website.

General collection of data
When you access our website or retrieve a file, data about this process is stored in a log file on our web server. Specifically, the following data may be stored:

IP address (if possible, this is stored anonymously)
Domain name of the website you came from
Names of the files accessed
Date and time of access
Name of your Internet service provider
And, if applicable, the operating system and browser version of your device

We store IP addresses solely for data security reasons in order to ensure the stability and security of our system (legal basis: Art. 6 (1) (f) GDPR). We reserve the right to statistically evaluate anonymized data records.

SSL encryption
This website uses SSL (Secure Socket Layer) encryption for the transmission of data from your browser to our server and to servers that provide files that we integrate into our website. With SSL, data is transmitted in encrypted form. The data cannot be changed and the sender can be identified. You can recognize the presence of SSL encryption by the text “https” preceding the address of the website you are visiting in your browser.

Newsletter
We only send newsletters containing promotional information with the consent of the recipients or on the basis of legal permission. Registration for our newsletter is done via a double opt-in procedure: after registering, you will receive an email asking you to confirm your registration. This confirmation is necessary to verify you as the owner of the email address. The newsletter subscription is logged in order to be able to prove the subscription in accordance with legal requirements. This includes storing the time of registration and confirmation as well as your IP address. Other data that you provided when registering for the newsletter is also stored. We use your information, except for your email address, solely to personalize the newsletter, including, for example, your name. You can unsubscribe from the newsletter at any time. A link to unsubscribe from the newsletter can be found in every newsletter email.

Contact forms
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored and processed by us for the purpose of processing the inquiry and in case of follow-up questions. Your data will be used exclusively for the purpose of answering and processing your question. Data processing is carried out here in accordance with Art. 6 (1) (a) GDPR on the basis of your voluntary consent. You can object to this at any time (right of withdrawal).

Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format.

Confidentiality of your customer access
If you have been given access to a protected area of our website that is secured by a password, you are responsible for keeping this password confidential. We ask that you do not share the password with anyone.

Links to other websites
Our website/app may from time to time contain links to third-party websites or to other websites owned by us. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these privacy policies before you submit any personal data to these websites.

References to third-party websites
This website contains references to third-party websites in the form of links. Only when you click on such a link will data be transferred to the link destination. This is technically necessary. The data transferred includes, in particular: your IP address, the time at which you clicked on the link, the page on which you clicked on the link, and information about your Internet browser. If you do not want this data to be transferred to the link destination, do not click on the link.

Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement, if the data subject considers that the processing of personal data relating to them infringes the EU General Data Protection Regulation (GDPR).

Security notice
We secure our website and other IT systems against loss, destruction, unauthorized access, unauthorized modification, or unauthorized distribution of your data by means of appropriate technical and organizational measures. However, despite all due care, complete protection against all risks is not always possible. Because we cannot guarantee complete data security when communicating by email, we recommend sending confidential information by post.

Changes to this privacy policy
We reserve the right to change this privacy policy if the legal situation or this online offering or the type of data collection changes. However, this only applies to statements regarding data processing. If the user’s consent is required or if parts of the privacy policy contain provisions governing the contractual relationship with users, the privacy policy will only be changed with the user’s consent. Therefore, please inform yourself about this privacy policy as necessary, especially if you provide personal data. If you have any questions about the collection, processing, or use of your personal data, or if you wish to request information, correction, blocking, or deletion of data, or revoke consent or object to a specific use of data, please contact: mail@vosswinkel-gmbh.de