Data Protection Policy

Thank you for your interest in our website. Protection of your personal data is very important to us. Find information below on how we handle the data we record when you use our website. Your data are processed in accordance with the statutory provisions on data protection.

Our data protection policy is meant to be easily comprehensible for everyone. This data protection policy usually uses the official terms of the General Data Protection Regulation (GDPR). The terms are officially defined in Article 4 GDPR.

When you call up our website, it is technically necessary that your web browser transmits data to our web server. The following data are recoded during an active connection for communication between your web browser and our web server:

• Date and time of the query;
• Name of the requested file;
• The page from which the file was requested;
• Access status;
• Web browser used and operating system used;
• (Complete) internet protocol address of the requesting computer; and
• Transferred data volume.

We collect the data listed in order to ensure smooth connection with the website and to permit comfortable use of our website. The log file is also used to evaluate system security and stability, as well as for administrative purposes. The legal basis for temporary storage of the data and log files is point (f) of Article 6(1) GDPR.

For reasons of technical security, specifically to defend against attempted attacks on our web server, these data will be briefly stored by us. These data do not permit conclusion to individual persons. The data are anonymised by shortening of the IP address to domain level after not more than 7 days. This renders it impossible to link them to individual users.

Our website uses cookies that your browser stores on your device. They contain specific settings for use of the website (e.g. on the active session). Cookies serve to make our offer user-friendly, more effective and safe. Cookies are small text files that are stored on your computer and that your browser stores. Most of the cookies we use are "session cookies". They are deleted automatically after you close your browser. Other cookies remain stored on your end device until you delete them, or their storage duration expires. These cookies enable us to recognise your browser again on your next visit. Some cookies serve to simplify website processes by storing settings (e.g. remembering options already chosen). As far as personal data are processed by individual cookies implemented by us, they are processed in accordance with point (b) of Article 6(1) GDPR either to carry out the contract, or in accordance with point (f) of Article 6(1) GDPR to maintain our legitimate interests in best function of the website, as well as customer-friendly and effective design of the page visit.

You can set your browser so that you will be informed when cookies are set, and only permit cookies in individual cases, prevent acceptance of cookies for certain cases or in general and activate automatic deletion of the cookies when you close the browser. The cookie settings can be managed under the following links for the respective browser.

Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen 
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies 
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html 

You can also manage the advertising cookies of many companies and functions separately. You can use the corresponding user tools for this. They are available at  https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices
Most browsers also offer a "Do-Not-Track" function that allows you to specify that you do not want to be "tracked" by websites. When this function is active, your browser will inform advertising networks, websites and applications that you do not wish to be tracked for behaviour-based advertising and similar purposes. Information and instructions on how to set this function is available under the following links, sorted by browser provider:

Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
Mozilla Firefox: https://www.mozilla.org/de/firefox/dnt/
Internet Explorer: https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not-track
Safari: https://support.apple.com/kb/PH21416?locale=de_DE 
Opera: http://help.opera.com/Windows/12.10/de/notrack.html

You can also prevent loading of scripts by default. NoScript restricts execution of JavaScripts, Java and other plug-ins to trustworthy domains of your choice. Information and instructions on how to set this function is available from the provider of your browser (e.g. for Mozilla Firefox at:  https://addons.mozilla.org/de/firefox/addon/noscript/).
Please observe that the function of this website may be limited if you deactivate cookies.

Our website uses the offer of OpenStreetMap. This is a free project of the OpenStreetMap Foundation. This enables us to display maps directly on the website and enables comfortable use of the map function for you.

When you visit the website, data will be transmitted to OpenStreetMap Foundation in accordance with the item "Collection of personal data during a visit to our website".

Further information on the purpose and scale of data collection and processing by the provider is available in the data protection statement at https://wiki.osmfoundation.org/wiki/Privacy_Policy

If you send us any queries via the contact form or email, your information from the contact form or email, including the first and last name, postal address and form of address you indicate there, will be stored by us for processing of the request and in case we have any subsequent questions. You must indicate an email address to enable us to contact you, and a phone number if you desire us to call you back. We will never pass your data on without your consent. The legal basis for processing of the data is our legitimate interest in answering your query in accordance with point (f) of Article 6(1) GDPR and potentially point (b) of Article 6 (1) GDPR if your query is targeted at conclusion of a contract. Your data will be deleted after final processing of your request, except if this is prevented by statutory archiving obligations. In case of point (f) of Article 6(1) GDPR), you can object to processing of your personal data at any time.

You can object to data collection and storage at any time, effective for the future, by clicking this link. After your objection, an opt-out cookie is installed on your end device. You will need to click the link (https://www.econda.de/widerruf-zur-datenspeicherung/) again if you delete your cookies.

Website visitors can object to this data collection and storage at any time, effective for the future, under the URL
http://www.econda.de/econda/unternehmen/datenschutz/widerspruchscookie/ . 

Your personal data will not be passed on to any third parties, except:

• if we have explicitly stated so in the description of the respective data processing activity;
• if you have explicitly consented to this pursuant to sentence 1 of point (a) of Article 6(1) GDPR;
• forwarding is necessary under point (f) of sentence 1 of Article 6(1) GDPR for establishment, exercise or defence of legal claims, and there is no reason to assume that you have an overriding protection-worthy interest in your data not being passed on;
• if disclosure is required due to statutory obligations pursuant to sentence 1 of point (c) of Article 6(1) GDPR; and / or
• if this is necessary according to sentence 1 of point (b) of Article 6(1) GDPR for processing contractual relationships with you.

We also use external service providers for processing our services. These have been carefully selected and charged in writing. They are bound to our instructions and regularly inspected by us. We have concluded data processing contracts in accordance with Article 28 GDPR with them as far as required. They are service providers for webhosting, email dispatch, maintenance and care of our IT systems, etc. The service providers will not pass on any data to third parties.

Subject to the proviso of Article 32 GDPR and considering the state of the art, the costs of implementation and the nature, scope, context and purposes of processing, as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we implement appropriate technical and organisational measures to ensure a level of security appropriate for the risk. This website uses SSL encryption for reasons of security and to protect transmission of confidential contents.

The duration of storage of personal data is determined by the relevant legal archiving periods (e.g. under commercial law and tax law). After the end of the respective deadline, the corresponding data will be deleted in the scope of a routine process. If data are needed to perform a contract or if we have a legitimate interest in further storage, the data will be deleted when they are no longer needed for this purpose, or after you use your revocation or objection rights.

Find information below on which rights you, as the data subject, have under the applicable data protection law towards the controller concerning processing of your personal data:

The right to demand information in accordance with Article 15 GDPR regarding processing of your personal data by us. In particular, you may request information on the processing purposes, category of personal data, categories of recipients to whom your data have been or are disclosed, the planned storage duration, the existence of a right to correction, erasure, restriction of processing or objection, existence of a right to complaint, origin of your data if they were not collected at our site, and the existence of automated decision-making, including profiling and any indicative information on its details.

The right to demand rectification of any inaccurate personal data stored by us or completion of these without undue delay in accordance with Article 16 GDPR.

The right to demand erasure of your personal data stored by us in accordance with Article 17 GDPR, as far as processing is not required in order to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest or for assertion, exercise or defence of legal claims.

The right to demand restriction of processing of your personal data in accordance with Article 18 GDPR, as far as the accuracy of the data is disputed by you, processing is not legitimate, but you decline erasure and we no longer require the personal data, but you still require them to assert, exercise or defend legal claims, or you have objected to processing in accordance with Article 21 GDPR.
The right to demand to receive your personal data that you have provided to us in a structured, common and machine-readable format, or to demand transfer to another controller in accordance with Article 20 GDPR.

The right to lodge a complaint with a supervisory authority in accordance with Article 77 GDPR. Usually, you can contact the supervisory authority of the Federal State of our registered office indicated above, or that of your common place of residence or workplace, if applicable.

The right to withdrawal of consent given in accordance with Article 7 (3) GDPR: You have the right to withdraw consent given for processing of data at any time, effective for the future. In case of revocation, we will erase the affected data without undue delay unless further processing can be supported on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

If your personal data are processed by us based on legitimate interests in accordance with sentence 1 of point (f) of Article 6(1) GDPR, you have the right to object to processing of your personal data in accordance with Article 21 GDPR, as far as there are grounds for this that result from your special situation. If the objection is targeted against processing of personal data for the purpose of direct marketing, you have a general objection right without having to indicate a particular situation.

If you want to exercise your revocation right or right to object, simply send an email to: nfzlhfr-hndhbngd.

Social networks (Facebook, Twitter and Xing) are only integrated on our website as links to their respective services. After clicking the integrated text/picture link, you will be forwarded to the website of the respective provider. User information will only be transferred to the respective provider after forwarding. Information on handling of your personal data when using those websites can be found in the respective data protection policies of the providers used by you.

We reserve the right to change or update this data protection policy as required under observation of the applicable data protection provisions. This way, we can adjust it to the current legal requirements and consider changes to our offers, e.g. when introducing new services. The respective latest version applies to your visit at all times.

Status of the data protection policy: 20 May 2019