DATA PROTECTION
1. The person responsible within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is: Victoria Hübner Your data subject rights
You can exercise the following rights at any time using the contact details provided by our data protection officer:
- Information about your data stored by us and its processing (Art. 15 GDPR),
- Correction of inaccurate personal data (Art. 16 GDPR),
- Deletion of your data stored by us (Art. 17 GDPR),
- Restriction of data processing if we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR),
- Objection to the processing of your data by us (Art. 21 GDPR) and
- Data portability, provided that you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).
If you have given us your consent, you can revoke it at any time with effect for the future.
You can lodge a complaint with a supervisory authority at any time, for example, the competent supervisory authority in the federal state in which you reside or the authority responsible for us as the controller.
A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de.
Collection of general information when visiting our website
Type and purpose of processing:
When you access our website, i.e., if you do not register or otherwise submit information, general information is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, and similar information.
They are processed in particular for the following purposes:
- Ensuring a smooth connection to the website,
- Ensuring smooth use of our website,
- Evaluation of system security and stability as well as
- for further administrative purposes.
We do not use your data to draw conclusions about you personally. We may statistically evaluate this type of information to optimize our website and the technology behind it.
Legal basis:
The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
Recipient:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage period:
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this is generally the case when the respective session ends.
Provision required or necessary:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. Furthermore, individual services may be unavailable or restricted. For this reason, an objection is excluded.
Cookies
Type and purpose of processing:
Like many other websites, we also use so-called "cookies." Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.
This allows us to receive certain data such as IP address, browser used and operating system.
Cookies cannot be used to launch programs or transmit viruses to a computer. The information contained in cookies allows us to make navigation easier for you and ensure our websites are displayed correctly.
Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.
Of course, you can also view our website without cookies. Internet browsers are generally set to accept cookies. You can generally disable cookies at any time via your browser settings. Please use the help function of your Internet browser to learn how to change these settings. Please note that individual features of our website may not work if you have disabled cookies.
Storage period and cookies used:
If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:
14 Takes
To the extent that these cookies may (also) affect personal data, we will inform you about this in the following sections.
You can delete individual cookies or all cookies via your browser settings. You can also find information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you can find the necessary information at the following links:
- Mozilla Firefox: https://support.mozilla.org
- Internet Explorer: https://support.microsoft.com
- Google Chrome: https://support.google.com
- Opera: http://www.opera.com/de/help
- Safari: https://support.apple.com
Provision of paid services
Type and purpose of processing:
In order to provide paid services, we request additional data, such as payment details, in order to process your order.
Legal basis:
The processing of data necessary for the conclusion of the contract is based on Art. 6 (1) (b) GDPR.
Recipient:
Recipients of the data may be contract processors.
Storage period:
We store this data in our systems until the statutory retention periods have expired. These are generally six or ten years for reasons of proper accounting and tax requirements.
Provision required or necessary:
The provision of your personal data is voluntary. Without it, we cannot grant you access to the content and services we offer.
Newsletter
Type and purpose of processing:
Your data will be used exclusively to send you the newsletter you have subscribed to by email. Your name is required so that we can address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject.
To receive the newsletter, simply provide your email address. When you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by email about circumstances relevant to the service or registration (e.g., changes to the newsletter offering or technical issues).
For effective registration, we require a valid email address. To verify that the registration was actually made by the owner of the email address, we use the "double opt-in" process. For this purpose, we log the newsletter subscription, the sending of a confirmation email, and the receipt of the requested response. No further data is collected. The data is used exclusively for sending the newsletter and is not shared with third parties.
Legal basis:
Based on your express consent (Art. 6 (1) (a) GDPR), we will regularly send you our newsletter or similar information by email to the email address you provided.
You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with future effect. A corresponding link is included in every newsletter. You can also unsubscribe directly on this website at any time or notify us of your revocation using the contact option provided at the end of this privacy policy.
Recipient:
Recipients of the data may be contract processors.
Storage period:
In this context, the data will only be processed as long as the corresponding consent has been obtained. After that, it will be deleted.
Provision required or necessary:
The provision of your personal data is voluntary and solely based on your consent. Without your consent, we unfortunately cannot send you our newsletter.
Contact form
Type and purpose of processing:
The data you enter will be stored for the purpose of individual communication with you. For this purpose, you must provide a valid email address and your name. This will be used to assign your inquiry and subsequently respond to it. Providing further data is optional.
Legal basis:
The data entered into the contact form is processed on the basis of a legitimate interest (Art. 6 (1) (f) GDPR).
By providing this contact form, we want to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your inquiry and for any follow-up questions.
If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 (1) (b) GDPR).
Recipient:
Recipients of the data may be contract processors.
Storage period:
Data will be deleted no later than 6 months after the request has been processed.
If a contractual relationship is entered into, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and will delete your data after these periods have expired.
Provision required or necessary:
Providing your personal data is voluntary. However, we can only process your request if you provide us with your name, email address, and the reason for your request.
Use of Google Analytics
Type and purpose of processing:
This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: "Google"). Google Analytics uses so-called "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.
Die Zwecke der Datenverarbeitung liegen in der Auswertung der Nutzung der Website und in der Zusammenstellung von Reports über Aktivitäten auf der Website. Auf Grundlage der Nutzung der Website und des Internets sollen dann weitere verbundene Dienstleistungen erbracht werden.
Legal basis:
The data is processed on the basis of the user’s consent (Art. 6 (1) (a) GDPR).
Recipient:
The recipient of the data is Google as the data processor. We have concluded a corresponding data processing agreement with Google for this purpose.
Storage period:
The data will be deleted as soon as it is no longer required for our recording purposes.
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov.
Provision required or necessary:
The provision of your personal data is voluntary and based solely on your consent. If you deny access, this may result in functional limitations on the website.
Revocation of consent:
You can prevent cookies from being saved by selecting the appropriate settings in your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore, you can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: Browser Add-On for deactivating Google Analytics.
In addition to, or as an alternative to, the browser add-on, you can prevent Google Analytics from tracking our websites by clicking this link. This will install an opt-out cookie on your device. This will prevent Google Analytics from tracking data for this website and this browser in the future, as long as the cookie remains installed in your browser.
Profiling:
Using the tracking tool Google Analytics, we can evaluate the behavior of website visitors and analyze their interests. For this purpose, we create a pseudonymous user profile.
Use of script libraries (Google Webfonts)
Type and purpose of processing:
Um unsere Inhalte browserübergreifend korrekt und grafisch ansprechend darzustellen, verwenden wir auf dieser Website „Google Web Fonts“ der Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; nachfolgend „Google“) zur Darstellung von Schriften.
The privacy policy of the library operator Google can be found here: https://www.google.com/policies/
Legal basis:
The legal basis for the integration of Google Webfonts and the associated data transfer to Google is your consent (Art. 6 (1) (a) GDPR).
Recipient:
Accessing script libraries or font libraries automatically triggers a connection to the library's operator. It's theoretically possible—although currently unclear whether and, if so, for what purposes—that the operator collects Google data in this case.
Storage period:
We do not collect any personal data through the integration of Google Webfonts.
Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov.
Provision required or necessary:
The provision of personal data is neither legally nor contractually required. However, correct display of the content may not be possible using standard fonts.
Revocation of consent:
The JavaScript programming language is regularly used to display the content. You can therefore object to data processing by deactivating JavaScript in your browser or installing a JavaScript blocker. Please note that this may result in functional limitations on the website.
Use of Google Maps
Type and purpose of processing:
We use Google Maps on this website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). This allows us to display interactive maps directly on the website and enable you to conveniently use the map function.
For more information about data processing by Google, please see the Google Privacy Policy. You can also change your personal data protection settings in the Privacy Center.
Detailed instructions on how to manage your data in connection with Google products can be found here.
Legal basis:
The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 (1) (a) GDPR).
Recipient:
When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data is assigned directly to your account.
If you do not wish to be assigned to your Google profile, you must log out of Google before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research, and/or tailoring its website to meet your needs. Such evaluation is carried out in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; you must contact Google to exercise this right.
Storage period:
We do not collect any personal data through the integration of Google Maps.
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov.
Revocation of consent:
If you do not want Google to collect, process, or use data about you through our website, you can deactivate JavaScript in your browser settings. However, in this case, you will not be able to use our website at all, or only to a limited extent.
Provision required or necessary:
The provision of your personal data is voluntary and based solely on your consent. If you deny access, this may result in functional limitations on the website.
Embedded YouTube videos
Type and purpose of processing:
We embed YouTube videos on some of our websites. The operator of the corresponding plug-ins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube"). When you visit a page with the YouTube plug-in, a connection to YouTube servers is established. This informs YouTube which pages you visit. If you are logged into your YouTube account, YouTube can assign your browsing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.
When a YouTube video is started, the provider uses cookies that collect information about user behavior.
Further information on the purpose and scope of data collection and processing by YouTube can be found in the provider's privacy policy. There you will also find further information on your rights and settings options for protecting your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov).
Legal basis:
The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 (1) (a) GDPR).
Recipient:
Accessing YouTube automatically triggers a connection to Google.
Storage period and revocation of consent:
Anyone who has deactivated cookies for the Google Ads program will not encounter such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block cookies in your browser.
Weitere Informationen zum Datenschutz bei „YouTube“ finden Sie in der Datenschutzerklärung des Anbieters unter:
https://www.google.de/privacy/
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov.
Provision required or necessary:
The provision of your personal data is voluntary and based solely on your consent. If you deny access, this may result in functional limitations on the website.
Social Plugins
Type and purpose of processing:
Our websites use social plugins from the providers listed below. You can recognize the plugins by the corresponding logo.
Über diese Plugins werden unter Umständen Informationen, zu denen auch personenbezogene Daten gehören können, an den Dienstebetreiber gesendet und ggf. von diesem genutzt. Wir verhindern die unbewusste und ungewollte Erfassung und Übertragung von Daten an den Diensteanbieter durch eine 2-Klick-Lösung. Um ein gewünschtes Social Plugin zu aktivieren, muss dieses erst durch Klick auf den entsprechenden Schalter aktiviert werden. Erst durch diese Aktivierung des Plugins wird auch die Erfassung von Informationen und deren Übertragung an den Diensteanbieter ausgelöst. Wir erfassen selbst keine personenbezogenen Daten mittels der Social Plugins oder über deren Nutzung.
We have no influence on what data an activated plug-in collects and how this data is used by the provider. Currently, it must be assumed that a direct connection to the provider's services is established, and that at least the IP address and device-related information are collected and used. It is also possible that the service providers attempt to store cookies on the computer used. For information about the specific data collected and how it is used, please refer to the privacy policy of the respective service provider. Note: If you are logged into Facebook at the same time, Facebook can identify you as a visitor to a specific page.
We have integrated the social media buttons of the following companies on our website:
SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) over HTTPS.
Changes to our privacy policy
We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services in the privacy policy, for example, when introducing new services. The new privacy policy will then apply to your next visit.
Questions for the Data Protection Officer
If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly:
kontakt@studio-huebner.de