Information on the Processing of Your Personal Data in Accordance with Article 13 of the General Data Protection Regulation (GDPR)
1. Data Controller
The person responsible for this website is
Thomas Boger
2. Data Processed for Displaying the Website and Creating Log Files
a. What data is processed and for what purpose?
Whenever content on this website is accessed, data that may allow identification is temporarily stored. The following data is collected:
– Date and time of access
– IP address
– Hostname of the accessing computer
– Website from which this website was accessed
– Websites accessed via this website
– Page visited on our website
– Information as to whether the request was successful
– Amount of data transferred
– Information about the browser type and version used
– Operating system
The temporary storage of this data is necessary to enable the website to be delivered correctly during a website visit. Further storage in log files is carried out in order to ensure the proper functioning of the website and the security of the information technology systems. These purposes also constitute our legitimate interest in processing the data.
b. What is the legal basis for processing this data?
The data is processed on the basis of Article 6(1)(f) GDPR.
c. Are there any other recipients of the personal data besides the Data Controller?
The website is hosted by: Mittwald CM Service GmbH & Co. KG Königsberger Str. 4–6 32339 Espelkamp Germany
The hosting provider receives the above-mentioned data as a processor acting on our behalf.
d. How long is the data stored?
The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data required to provide the website, this is generally the case once the respective session has ended. The log files are stored directly and are accessible exclusively to administrators. Thereafter, they may only be indirectly available through the reconstruction of backup media and will subsequently be permanently deleted.
3. Rights of Data Subjects
a. Right of Access
You have the right, pursuant to Article 15 GDPR, to obtain information about the personal data concerning you that we process.
b. Right to Object
You have the right to object on grounds relating to your particular situation (see Section II below).
c. Right to Rectification
If the information concerning you is inaccurate or no longer accurate, you may request rectification pursuant to Article 16 GDPR. If your data is incomplete, you may request that it be completed.
d. Right to Erasure
You may request the erasure of your personal data pursuant to Article 17 GDPR.
e. Right to Restriction of Processing
Pursuant to Article 18 GDPR, you have the right to request the restriction of the processing of your personal data.
f. Right to Lodge a Complaint
If you believe that the processing of your personal data infringes data protection law, you have the right, pursuant to Article 77(1) GDPR, to lodge a complaint with a supervisory authority of your choice. This includes the data protection supervisory authority responsible for the controller: State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia https://www.ldi.nrw.de/kontakt/ihre-beschwerde
g. Right to Data Portability
Where the requirements of Article 20(1) GDPR are met, you have the right to receive data that we process automatically on the basis of your consent or for the performance of a contract, or to have such data transmitted to a third party. The collection of data required to provide the website and the storage of log files are essential for the operation of the website. Accordingly, such processing is not based on consent pursuant to Article 6(1)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, but is justified on the basis of Article 6(1)(f) GDPR. The requirements of Article 20(1) GDPR are therefore not met in this respect.
II. Right to Object pursuant to Article 21(1) GDPR
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data where such processing is based on Article 6(1)(f) GDPR. The controller will then no longer process the personal data unless the controller can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or unless the processing is necessary for the establishment, exercise or defence of legal claims. The collection of data required to provide the website and the storage of log files are essential for the operation of the website.