Who the data processing controller is in our company
The data processing controller is:
Kurgartenstr. 37a 90762 Fürth
Tel.: +49 911-974-3720
Contact details of our data protection officer
City of Fürth
Data Protection Officer
Königstr. 86-88 90762 Fürth
Tel.: +49 911-974-0
The processing of your data within the framework of the core activity of our company
We process your personal data transferred to us within the framework of the contractual and pre-contractual relationship existing between us. The scope, nature, purpose and necessity of the processing shall depend on the contractual relationship on which it is based. For this purpose we store and process your data in the computer systems we use. The data processed by us includes all those data which have been provided for the purpose of using the contractual or pre-contractual services provided by you and which are required to process your enquiry or the contract concluded between us.
This may include in particular the following data:
Name and address
E-mail address and telephone number
The processing is limited to those data which are necessary and expedient to answer inquiries and/or to fulfil a contract concluded between you and us. Personal data will only be passed on to third parties if this is necessary for the purpose of providing the service or, within the framework of the organisation of our company, for processing financial accounting and complying with legal obligations. In this case, only those data will be transferred to external service providers that are necessary and expedient for the fulfilment of the contract or for the processing of financial accounting and the compliance with legal obligations. Processing by us shall be carried out in accordance with your instructions or the statutory provisions.
Legal basis: The processing of your personal data as well as the transfer to third parties is carried out in accordance with Art. 6 para. 1 lit. b) GDPR and serves to fulfil the contract between you and us. Otherwise, we only pass on data to third parties if there is a legal obligation to do so, Art. 6 para. 1 lit. c) GDPR or if there is a legitimate interest in doing so, Art. 6 Para. 1 lit. f. GDPR. This is for example the case if this is necessary to pursue our claims.
Erasure: Your data will be erased as soon as they are no longer required for the fulfilment of contractual or legal duties of care and for dealing with any warranty and comparable obligations. This does not affect the statutory storage obligations.
We use an Internet service provider to maintain our online presence, on whose server the website is stored (hosting) and which makes our website available on the Internet. Here, the Internet service provider processes contact data, content data, contract data, usage data, inventory data as well as meta and communication data on our behalf. Name and address of the Internet service provider: 1&1 IONOS SE Elgendorfer Str. 57, 56410 Montabaur, Germany
You can view their data protection provisions here: http://bit.ly/ionos-datenschutz
Legal basis: The Internet service provider processes the above-mentioned data on our behalf, Art. 28 GDPR. The data processing is carried out on the basis of our legitimate interest in an efficient and secure provision of our Internet offer, Art. 6 para. 1 lit. f) GDPR.
If you use our website for informational purposes only, our Internet service provider only collects the personal data that the browser you use transmits to its server. These are the following data:
the date and time of access to our website
time zone difference to Greenwich Mean Time (GMT)
access status (HTTP status)
the amount of data transferred
the Internet service provider of the accessing system
the type of browser you use and its version
the operating system you use
the website from which you may have accessed our website
the pages or sub-pages that you visit on our website.
The aforementioned data is stored as log files on the servers of our Internet service provider. This is necessary in order to display the website on the end device you use and to ensure stability and security. Our legitimate interest in data processing lies in the above-mentioned purposes. Legal basis: The data processing is carried out on the basis of our legitimate interest in an efficient and secure provision of our Internet offer, Art. 6 para. 1 lit. f) GDPR.
Duration of data storage: The above data for the provision of our website will be stored for a duration of seven days and then erased.
Information on the contact details we keep available
If you contact us via e-mail, social media, telephone, fax, post, our contact form or in any other way and provide us with personal data such as your name, telephone number or e-mail address or provide further information about your person or your request, this data will be stored and processed by us to process your request.
Legal basis: If you have made your request via our contact form, the legal basis for the processing of your data is Art. 6 para. 1 lit. a) GDPR. If you make your request within the framework of a contractual or pre-contractual relationship with us, the legal basis for the processing of your data is Art. 6 para. 1 lit. b) GDPR. If your request does not fall into one of the above categories, our legitimate interest in processing your data is to answer your request properly and in your interest, Art. 6 para. 1 lit. f) GDPR.
Erasure: The personal data collected by us will be erased if they are no longer required. We check the necessity every two years. You can also revoke the data processing at any time.
Your rights under the GDPR
Right of access: In accordance with Art. 15 GDPR, you can request confirmation as to whether and what personal data we process from you. In addition, you may request from us, free of charge, information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right of rectification, erasure, restriction of processing or objection, the existence of a right of appeal, as well as the origin of your data if it has not been collected by us. Furthermore, you have the right of access information pertaining to whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you have the right to be informed about the appropriate guarantees in connection with the transmission.
Right of rectification: In accordance with Art. 16 GDPR, you can request the rectification of incorrect or incomplete personal data stored by us and concerning you.
Right to erasure: In accordance with Art. 17 GDPR, you have the right to request the erasure of your personal data stored with us, provided that we do not require their processing for the following purposes:
to fulfil a legal obligation
to assert, exercise or defend legal claims
to exercise the right to freedom of expression and information, or
for reasons of public interest as referred to in Art. 17 para. 3 lit. c) and d) GDPR.
Right to restriction: In accordance with Art. 18 GDPR, you have the right to request that the processing of your personal data be restricted if
the accuracy of the data is disputed by you, for a duration of time that allows us to verify the accuracy of the personal data,
the processing of your data is unlawful, but you refuse to have it erased and instead demand that the use of the data be restricted,
we no longer need the personal data for the purposes of the processing, but you need the data to assert, exercise or defend legal claims
You have lodged an objection to the processing of your data in accordance with Art. 21 GDPR, but it has not yet been established whether the legitimate reasons which entitle us to further processing outweigh your rights despite your objection.
Right to be informed: If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of the correction, deletion or restriction of processing requested by you, unless this proves impossible or involves a disproportionate effort. You have the right to be informed by us about these recipients.
Right to data portability: In accordance with Art. 20 GDPR, you can request that we receive the personal data concerning you that you have provided us with in a structured, common and machine-readable format or request that it be transferred to another controller.
Right of appeal: Under Art. 77 GDPR, you have the right to lodge complaint to a supervisory authority. For this you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.
Right of withdrawal
In accordance with Art. 7 para. 3 GDPR you have the right to withdraw your consent to the processing of your data at any time. The withdrawal declared by you does not change the lawfulness of the processing of your personal data up to the withdrawal.
Right to object
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to you on the basis of a balancing of interests (Art. 6 para. 1 lit. f) GDPR). This is particularly the case if the data processing is not necessary for the fulfilment of a contract. If you exercise your right to object, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling reasons for data processing worthy of protection outweigh your interests and rights.
Irrespective of the above, you have the right to object at any time to the processing of your personal data for the purposes of advertising and data analysis.
Please send your objection to the contact address of the controller as stated above.
We use components of YouTube, a service of YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, on this website. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.
The use of YouTube enables us to embed various videos and clips that are available on the Internet platform www.youtube.de. After a page or subpage of our website is called up where such an embedding has taken place, the Internet browser you are using is prompted to download video components of the respective embedded video or clip. During your visit to our website and its sub-pages, both YouTube and Google are informed which page or sub-pages you have called up by transmitting your IP address to Google’s external servers in the USA. This information is transferred regardless of whether the videos or clips displayed are actually viewed or clicked, or whether you are logged in to your YouTube or Google account. Google is a participant in the Privacy-Shield Agreement and is certified for data processing according to European standards. This information is collected and assigned to your Google account, if you are logged in during your visit.
Purpose: The use of the YouTube components on our website is intended to provide you with videos and clips from the www.youtube.de website on our website for viewing and interaction purposes.
Legal basis: We use YouTube because of our legitimate interest in the optimisation and design of our online offer, Art. 6 para. 1 lit. f) GDPR. Prevention: You can the prevent data transfer at any time by logging out of your YouTube account or by setting an opt-out cookie using the following link https://adssettings.google.com/authenticated after logging into your Google account by clicking the logout button.
Information about the third party provider:
Headquarters within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Our online presence on social networks
We operate an online presence within the social networks listed below. If you visit one of these sites, your usage data will be collected and processed by the respective provider. This is usually done by means of cookies, which are stored on the end device you use. For the concept of cookies, see above under the appropriate heading. Cookies are used to store your usage behaviour and interests and to create corresponding user profiles. In the user profiles, data can also be stored independently of the device you use. This is especially the case if you are a member of the respective platform and logged in to it.
Plugins in the form of “social media buttons” of the providers we use are embedded on our website. You can recognise which plugin belongs to which provider by the respective logo with which the plugin is marked. We have deactivated the social media plugins on our website by default so that data is not automatically transferred to the provider of the plugin when our pages are accessed. For this we use the so-called 2-click solution. If you want to use a plugin, you have the possibility to activate it by clicking on the corresponding button. Only then is the plugin reloaded and the collection of information and its transfer to the provider triggered. In this case, even if you do not have an account with the respective social network or if you have an account but are not logged in, data can be sent to the associated provider through the active social media plugin.
The collected data is generally used by the provider for advertising and market research purposes by creating user profiles from your usage behaviour. These in turn can be used by the providers to present you with interest-based advertising. You have a right of withdrawal against the creation of user profiles. To exercise this right, you must contact the respective provider. If you have an account with the provider, your usage data can be linked to it. In order to prevent your data from being linked in this way, you can log out of the provider’s service before visiting our site.
The purpose and the extent to which data is collected by the provider can be found out from the respective privacy policies of the providers, which are provided below. We ourselves have no influence on what data is collected and how this data is used by the provider. If you wish to request information in detail here or exercise your rights as a data subject, you can do this most effectively with the respective provider, since only the respective providers have access to your data.
We would like to point out that your user data may be transferred and processed outside the area of the European Union. In this case, there is a risk that the enforcement of your data subject rights may become more difficult. Those US providers that are certified under the Privacy Shield have committed themselves to comply with EU data protection standards. The information as to whether the respective provider has such a certificate can be found in the information on the providers listed below.
Legal basis: If you have been asked by one of the providers listed below to consent to data processing, the legal basis for processing is Art. 6 para. 1 lit.a) GDPR. Furthermore, the processing of your data is based on our legitimate interests in contacting and communicating with you, Art. 6 para. 1 lit. f) GDPR.
Prevention: For the respective possibilities of objection (opt-out) we refer to the following linked information of the providers.
We maintain an online presence on the following social networks:
Twitter is a service of Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107, USA
Headquarters in the EU: Twitter Inc, 26 Fernian St, Dublin, Ireland
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
Facebook is a service of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA.
Headquarters in the EU: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Opt-Out: https://www.facebook.com/settings?tab=ads und http://www.youronlinechoices.com
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
We also take technical and organisational security measures in accordance with the state of the art in order to comply with the provisions of the data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties.