Data privacy statement
1. Data privacy summary
General information
The following information will give you a simple overview of what happens to your personal data when you visit our website. Personal data are all data which can be used to identify you personally. For more detailed information on data privacy, please read the data privacy statement below.
Data collection on our website
Who is responsible for collecting data on this website?
Data processing on this website is carried out by the website operator, whose contact details can be found in this website’s Imprint.
How do we collect your data?
Your data are collected when you forward them to us, for example data which you enter into a contact form.
Other data are automatically collected by our IT systems when you visit our website. This is primarily technical data (e.g. web browser, operating system and time of visit). These data are collected automatically when you visit our website.
How do we use your data?
Some data are collected to ensure that the website can be provided without any errors. Other data may be used to analyse user behaviour.
What rights do you have regarding your data?
You are entitled to information on the origins, recipients and purpose of your stored personal data at any time, free of charge. You are also entitled to request that the data be rectified, restricted or erased. You can contact us via the address provided in the Imprint at any time if you have any questions about data privacy. You also have the right to lodge a complaint with a supervisory authority.
2. General and obligatory information
Data privacy
The operators of this website take your data privacy very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this data privacy statement.
When you use this website, various personal data are collected. Personal data are all data which can be used to identify you personally. This data privacy statement explains which data we collect and what we use the data for. It also explains how and for what purpose this happens.
Please note that the transmission of data online (e.g. communicating via e-mail) may involve security risks. Complete protection of data from third-party access is not possible.
Information on controller
The controller for data collection on this website is:
Frank Noack
Dammstraße 31
D-03222 Lübbenau
Telephone: +49 3542 8901-0
E-mail: info@spreewaldeck.de
The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. name, e-mail addresses and similar).
Withdrawal of consent to data processing
Many data processing operations are only possible with your explicit consent. You can withdraw consent which has already been given at any time. Just send us an informal notification by e-mail. The legality of the data processing carried out before the withdrawal of consent is not affected by the withdrawal of consent.
Right to lodge a complaint with a supervisory authority
Data subjects also have the right to lodge a complaint with a supervisory authority in the event of data protection breaches. The responsible supervisory authority in matters of data protection is the data protection officer (Landesdatenschutzbeauftragte) in the state in which our company has its headquarters. Click on the following link for a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to receive or have transmitted to a third party the personal data we have collected by automated means on the basis of your consent or in the performance of a contract in a commonly used and machine-readable format. Where technically feasible, you have the right to have the data transmitted directly to another controller.
SSL and TLS encryption
For security reasons and to protect the transmission of confidential content such as orders or requests that you send to us as website operators, this website uses SSL and TLS encryption. You can tell it is an encrypted connection as the address bar in your browser changes from “http://” to “https://” and contains a padlock symbol.
When the SSL or TLS encryption is activated, the data that you forward to us cannot be intercepted by third parties.
Encrypted payment transactions on this website
If a fee is payable after you conclude a contract and you are obliged to provide your payment details (e.g. account number for direct debit authorisation), these data are required to process the payment.
Payment transactions using the customary means of payment (Visa/MasterCard, Direct Debit) are conducted via encrypted SSL or TSL connections only. You can tell it is an encrypted connection as the address bar in your browser changes from “http://” to “https://” and contains a padlock symbol.
The payment details that you forward to us cannot be intercepted by third parties in the case of encrypted communication.
Information, restriction, erasure
You have the right to information regarding your stored personal data, their origins and recipients and the purpose of the data processing free of charge as well as the right, where applicable, to rectification, restriction or erasure of these data. You can contact us via the address provided in the Imprint at any time if you have any questions about personal data.
E-mail advertisement veto
Use of contact data published in the obligatory Imprint for advertising and information materials that have not been explicitly requested is hereby vetoed. The website’s operators explicitly reserve the right to take legal action in the event of unsolicited advertising material being sent, for example, via spam e-mail.
3. Data protection officer
Statutory data protection officer
We have appointed a data protection officer for our company:
Frank Noack
Dammstraße 31
D-03222 Lübbenau
Telephone: +49 3542 8901-0
E-mail: info@spreewaldeck.de
4. Data collection on our website
Cookies
This website uses cookies. Cookies do not damage your computer in any way and do not contain any viruses. Cookies serve the purpose of making our offer more user-friendly, effective and safer. Cookies are small text files which are stored on your computer by your web browser.
Most of the cookies we use are known as “session cookies”. They are automatically deleted after you leave the site. Other cookies are stored on your end device until you delete them. These cookies help us recognise your browser when you return to our site.
You can set up your browser so that you can be notified when cookies are used and only allow them in individual cases, rule out the acceptance of cookies in certain cases or in general and automatically delete the cookies when you close your browser. This website may not work properly if you deactivate cookies completely.
Cookies required to carry out electronic communication processes or to provide certain functions that you have selected (e.g. shopping basket) are stored on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the storage of cookies to ensure the technically error-free and optimised provision of its services. Other cookies that are stored (e.g. cookies to analyse your surfing habits) are handled separately in this data privacy statement.
Server log files
The provider of this website automatically collects and stores information in server log files that your browser automatically transmits to us. These are:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of accessing computer
- Time of server request
- IP address
These data are not combined with other data sources.
The basis for this data processing is provided by Art. 6 (1) (b) GDPR, which permits the processing of data in the performance of a contract or in order to take steps prior to entering into a contract.
Contact form
If you send us a request via a contact form, we store your information from the request form, including the contact details you provide, in order to process the request and answer potential follow-up questions. We do not forward these data without your consent.
The data provided in the contact form is therefore processed only on the basis of your consent (Art. 6 (1) (a) GDPR). You may withdraw this consent at any time. Just send us an informal notification by e-mail. The legality of the data processing operations carried out before the withdrawal of consent is not affected by the withdrawal of consent.
The data provided in the contact form remains with us until you ask us to erase it, withdraw your consent to storage or the purpose of the data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions, in particular retention periods, are not affected by this.
Registering on this website
You can register on our website to use additional site functions. We only use the data provided in this case for the purposes of the respective offer or service for which you have registered. The obligatory information that is requested when you register must be specified in full, otherwise we will decline your registration.
We will use the e-mail address provided during registration to inform you of any important changes, such as the scope of the offer or technical modifications.
The data provided during registration are processed on the basis of your consent (Art. 6 (1) (a) GDPR). You can withdraw the consent you have already given at any time. Just send us an informal notification by e-mail. The legality of the data processing already carried out is not affected by the withdrawal of consent.
We store the data collected during registration for as long as you are registered on our website and then erase the data. Statutory retention periods are not affected by this.
Data processing (Customer and contract data)
We only collect, process and use personal data as far as necessary for the establishment, content-related structuring and amendment of the legal relationship (inventory data). The basis for this is provided by Art. 6 (1) (b) GDPR, which permits the processing of data in the performance of a contract or in order to take steps prior to entering into a contract. We collect, process and use personal data about the use of our website (usage data) only as far as necessary to enable the user to use the service or to invoice the user.
The customer data that are collected are erased after the order is concluded or the business relationship ends. Statutory retention periods are not affected by this.