1. Privacy at a glance
1.1. General information
This section gives a simple overview of what happens to your personal data when you visit our website. Personal data is any information relating to an identified or identifiable person. For detailed information on the processing of personal data when visiting this website, please refer to Section 2 of this data protection declaration.
1.2. Data collection on our website
1.2.1. Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website or in Section 2.2. remove.
1.2.2. How do we collect your data and what is it used for?
The use of our website does not require any indication of personal data. We only collect and process the information that you transmit to us automatically via your browser.
This is the browser type/version, operating system used, referrer URL, IP address of the accessing computer and time and duration of the server request. This data cannot be assigned to specific persons for us. A combination of this data with other data sources is not carried out, the data is also deleted after a statistical evaluation. This automatically transmitted data is recorded and evaluated solely for the purpose of properly and optimally presenting the information provided and for the purpose of statistical evaluations. However, with the cooperation of your Internet access provider, it is theoretically possible for a certain period of time to identify the owner of the Internet connection through which you access our site based on the transmitted IP address. Information about the duration of the storage of used and assigned IP addresses at your Internet access provider will be provided on request.
If you transmit personal data to us via the contact form on our website, this is done on a voluntary basis. This data will only be used to process your specific message. This data will only be passed on in accordance with the provisions of the Federal Data Protection Act if you have previously consented to the data being passed on, we are entitled to do so based on statutory provisions and/or are obliged to pass it on based on a law, regulation, official or court order.
1.2.3. What rights do you have regarding your data?
You have the right at any time to correct, block or delete personal data under the legal requirements. Of course, we will provide you with free information about the personal data stored about you, the recipients or categories of recipients to whom this data is passed on and the purpose of the storage. You can contact us at any time about this and other questions on the subject of data protection under the imprint or in Section 2.2. given address to contact us. You also have the right to lodge a complaint with the competent supervisory authority.
1.3. Analysis tools and third-party tools
When you visit our website, your surfing behavior can be statistically evaluated. This is mainly done with cookies and so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot usually be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following sections.
2. General information and your rights
2.1. Privacy
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
When you use this website, various personal data are processed. According to Art. 4 No. 1 of the General Data Protection Regulation (GDPR), personal data is all information relating to an identified or identifiable person. This data protection declaration explains which personal data we process and for what purposes.
2.2. Note on the responsible body
The person responsible for data processing on this website is:
Christoph Flohr
Ernst-Gnoß-Str. 5
40219 Düsseldorf
Tel: +49 (0) 211 / 566 78 742
info@profibaufi.de
(hereinafter the “website operator”, “us” or “we”)
According to Art. 4 No. 7 GDPR, the person responsible is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
2.3. Objection to advertising emails
We hereby object to the sending of unsolicited advertising and information material to the contact data published above in accordance with Article 13 (1) (a) GDPR. The site operators expressly reserve the right to take legal action in the event of unsolicited advertising being sent, such as spam e-mails.
2.4. Your rights as a data subject
2.4.1. Right of providing information
You have the right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right to complain, the origin of your data, if not collected from us, and the existence of automated decision-making including profiling and, if necessary, meaningful information about their details.
2.4.2. Right to rectification of inaccurate data
You have the right, in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us. To do this, please use the contact addresses given above.
2.4.3. Right to Erasure
You have the right, under the conditions described in Art. 17 GDPR, to request that we delete your personal data. In particular, these requirements provide for a right to erasure if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, as well as in cases of unlawful processing, the existence of an objection or the existence of an obligation to erasure under Union law or the law of the Member State to which we are subject. For the period of data storage, see Section 13 of this data protection declaration. To assert your above right, please use the contact addresses given above.
2.4.4. Right to restriction of processing
You have the right to demand that we restrict processing in accordance with Art. 18 GDPR. This right exists in particular if the accuracy of the personal data is disputed between the user and us, for the period that requires verification of the accuracy and in the event that the user requests restricted processing instead of deletion for an existing right to erasure; also in the event that the data is no longer required for the purposes we are pursuing, but the user needs it to assert, exercise or defend legal claims and if the successful exercise of an objection between us and the user is still disputed. To assert your above right, please use the contact addresses given above.
2.4.5. Right to data portability
You have the right to receive from us the personal data that you have provided to us in a structured, common, machine-readable format in accordance with Art. 20 GDPR. To assert your above right, please use the contact addresses given above.
2.4.6. Revocation of your consent to data processing
For some data processing, we ask for your express consent in accordance with Article 6 (1) (a) GDPR. If you give us your consent, you can revoke it at any time with effect for the future. For a revocation, an informal message by e-mail to us using the contact details given under 2.2 is sufficient. The legality of the data processing that took place up until the revocation remains unaffected by the revocation.
2.4.7. Right to object
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data relating to you, which is based, among other things, on Article 6 (1) lit. e or f GDPR, pursuant to Article 21 GDPR . We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
2.4.8. right of appeal
In accordance with Art. 77 GDPR, you also have the right to contact the competent supervisory authority in the event of complaints.
2.5. SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. The encrypted connection is used for all forms. These are integrated as an iFrame. Open the iFrame in a separate browser tab, you can recognize the encryption by the lock symbol in the address line of the browser and by the fact that the address of the page changes from “http://” to “https://”.
If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
3. Data collection on our website
3.1. cookies
Our websites use so-called cookies. Cookies are small text files that are stored on your computer and saved by your browser. They serve to make our offer more user-friendly, effective and secure.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit to our websites. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.
Cookies that are required to carry out the electronic communication process or to provide certain functions of our website (e.g. shopping cart function) are stored on the basis of Art. 6 Para. 1 lit. f GDPR. The data is processed on the basis of our legitimate interest in the technically error-free and optimized provision of our services.
Insofar as other cookies (e.g. cookies for analyzing your surfing behaviour) are stored, these are treated separately in this data protection declaration.
3.2. Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
• Browser type and browser version
• operating system used
• previously visited website
• Host name of the accessing computer
• Time of server request
• IP address
This data is not merged with other data sources.
The basis for data processing is Art. 6 Paragraph 1 lit. b GDPR, processing is necessary in order to be able to provide our website.
3.3. Registration on this site
You can register on our website to use additional functions on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise registration is not possible.
For important changes, such as the scope of the offer or technically necessary changes, we use the e-mail address provided during registration to inform you in this way.
The data entered during registration is processed on the basis of your consent (Article 6 (1) (a) GDPR). You can revoke any consent you have given at any time. An informal message by e-mail to us is sufficient. The legality of the data processing that has already taken place remains unaffected by the revocation.
The data recorded during registration will be stored by us as long as you are registered on our website and will be deleted if you also delete your user profile. In addition, we only store your data for a longer period of time if there is a legal obligation to do so.
3.4. comment function on this website
For the comment function on this page, in addition to your comment, information about the time the comment was created, your e-mail address and, if you do not select the “post anonymously” option, the user name you have chosen will be saved.
3.4.1. Storage of the IP address
Our comment function saves the IP addresses of the users who write comments. Since we do not check comments on our site before they are activated, we need this data in order to be able to take action against the author in the event of legal violations (such as insults).
3.4.2. Subscribe to comments
As a user of the site, you can subscribe to comments after registering. You will receive a confirmation email to verify that you are the owner of the email address provided. You can unsubscribe from this function at any time via a link in the info mails. In this case, the data entered when subscribing to comments will be deleted; if you have transmitted this data to us for other purposes and elsewhere (e.g. newsletter subscription), we will of course continue to process the data for this purpose.
3.4.3. Storage duration of the comments
The comments and the associated data are stored and remain on our website until the commented content has been completely deleted or the comments must be deleted for legal reasons (e.g. offensive comments).
3.4.4. legal basis
The comments are stored on the basis of your consent (Article 6 (1) (a) GDPR). You can revoke your consent at any time with effect for the future. An informal message by e-mail to us is sufficient. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
4. Analytics Tools and Advertising
4.1. Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Google Analytics also uses cookies, i.e. small text files that are stored on your device and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of our website, to compile reports on website activity for the website operator and to provide other services related to the use of our website and the internet. Google may also transfer this information to third parties if required to do so by law or if third parties process this data on Google’s behalf.
For more information about how Google uses your data, see Google’s privacy policy: https://www.google.com/policies/privacy
Data processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.
4.1.1. IP anonymization
We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
4.1.2. Prevention of data processing through browser settings and browser plugins
You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de.
4.1.3. Objection against data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Disable Google Analytics.
You can also object to the use of certain advertising cookies via the following websites:
https://www.aboutads.info/choices/
http://www.youronlinechoices.com/uk/your-ad-choices
4.1.4. Demographic characteristics in Google Analytics
This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the point “Objection to data collection”.
5. Plugins und Tools
5.1. Google Web Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly.
For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offering. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR.
If your browser does not support web fonts, a standard font will be used by your computer.
You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.
6. Sharing of Data
In principle, your personal data will only be passed on without your express prior consent in the following cases:
- If it is necessary to clarify illegal use of our services or for legal prosecution, personal data will be forwarded to the law enforcement authorities and, if necessary, to injured third parties. However, this only happens if there are concrete indications of illegal or abusive behavior. A transfer can also take place if this serves to enforce the terms of use or other agreements. We are also legally obliged to provide information to certain public bodies upon request. These are criminal prosecution authorities, authorities that prosecute administrative offenses subject to fines and the financial authorities. This data is passed on on the basis of our legitimate interest in combating abuse, prosecuting criminal offenses and securing, asserting and enforcing claims and that your rights and interests in protecting your personal data do not prevail, Art. 6 para. 1 lit. f GDPR.
- We rely on contractually affiliated third-party companies and external service providers (“processors”) to provide the services. In such cases, personal data will be passed on to these processors in order to enable them to process them further. These processors are carefully selected and regularly checked by us to ensure that your privacy is protected. The processors may only use the data for the purposes specified by us and are also contractually obliged by us to treat your data exclusively in accordance with this data protection declaration and the German data protection laws. The transfer of data to processors takes place on the basis of Art. 28 Para. 1 DSGVO, alternatively on the basis of our legitimate interest in the economic and technical advantages associated with the use of specialized processors, and the fact that your rights and interests in the Protection of your personal data does not prevail, Art. 6 Para. 1 lit. f GDPR.
If we use Google services, we also use Google as a processor. We also transmit to countries outside the European Economic Area (“EEA”). Google is certified under the EU-US Privacy Shield. For the USA, the European Commission made the decision on July 12, 2016 that under the regulations of the EU-US. Privacy Shields there is an adequate level of data protection (adequacy decision, Art. 45 GDPR).