Thank you for taking the time to view my data privacy information.

Thank you for visiting this website. The secure handling of your data is particularly important to us. We would therefore like to inform you in detail about the use of your data when you visit my website.

However, there is nothing that you really need to know. You have probably already read everywhere about the rights of data subjects and the information on technically necessary processing operations. And this website is designed to be as data-efficient as possible, so there is nothing “special” to explain apart from what is already in the law.

In my privacy policy, you will be informed about the processing of personal data of persons who use this website.

If the SDG applies, the following information applies analogously to the SDG.

 

Table of contents

I. Responsible body

II. What data is collected on this website?

III. how long will your data be stored?

IV. For what purposes do I process your data and on what legal basis?

V. Disclosure of your personal data to third parties?

VI. what data protection rights do you have?

VII. What should I bear in mind when linking to other websites?

VIII. Changes to this data protection notice

 

I. Responsible body

The controller is JBitz Beratungs- und Beteiligungsgesellschaft mbH, represented by its Managing Director Jürgen Bitz. I am responsible for the processing of your personal data. You can find my contact details in the legal notice.

Personal data is all data with which you could be personally identified. These individual details include your name or your contact details, such as telephone number, address and e-mail address, but also your network address (IP address).

The EU General Data Protection Regulation regulates which processing of this data is permitted. In the following, the General Data Protection Regulation is abbreviated to GDPR.

 

II. What data is collected on this website?

1. access data and log files

When using this website for purely informational purposes, i.e. if you do not register or otherwise provide me with information, only the data that your browser transmits to my server for technically necessary reasons will be collected. When you access my website, the following data in particular is collected, which is technically necessary to display the website to you:

• IP address (network address)
• Address of the website from which you came
• Address of the retrieved files (retrieval address = URL)
• Date and time of a retrieval
• as well as the operating system and browser version of your end device (user agent)

Collecting data initially only means that I (usually only my server) can actually gain knowledge of this data. Collecting data does not mean that data is stored. However, some of the data just mentioned is stored in log files without cause. This does not include the IP address. At most, this is logged on an ad hoc basis, for example if there are so many accesses in a short period of time that it can be assumed that there has been misuse or an attack (e.g. denial of service).

If your network address were not transmitted to my server, it would not even know who to show the website to. This is similar to a letter: If the sender is missing, the recipient cannot reply.

IP addresses are only stored, if at all, for specified purposes and for a specified duration. Unless otherwise specified, the maximum duration is five days. The purposes are only those that are in my legitimate interest to ensure the operation of this website. This includes defense against malicious attacks or excessive use of my offer.

When using this data, I do not draw any conclusions about your person. Rather, the information collected is only required for the following purposes

• Ensuring a smooth connection to the website
• To ensure convenient use
• Ensuring system security and stability
• statistics
• Other administrative purposes

We reserve the right to statistically evaluate anonymized data records. This means, for example: I would like to know which post on my website was viewed how often.

What I do not do is so-called fingerprinting, because this would be tantamount to tracking your activities. Fingerprinting is the evaluation of your digital fingerprint, which can be derived from the above-mentioned data that is transmitted when you visit a website.

The legal basis for my data processing is Art. 6 para. 1 f GDPR. In this respect, the legitimate interest follows from the purposes for data collection listed above. The data from server log files are always stored separately from all personal data provided by you. Merging is not possible.

2. cookies

Cookies are only used very sparingly on this website to enable the use of certain functions and to make visiting this website more practical, especially for administrators and editors.

A cookie stores information. A cookie is created when you visit a website and stored on your end device (smartphone, notebook, tablet, desktop PC, etc.) via your browser. If you visit this website again, your browser sends the previously received cookie back to my server. My website can evaluate the information received through this process. In particular, cookies can make it easier to navigate a website. Cookies are particularly necessary to enable the functionality of this website (the legal basis is Art. 6 para. 1 f GDPR, the protection of the legitimate interests of the operator of this website). I only use cookies in accordance with the principles of lawfulness, fairness and transparency (see Art. 5 para. 1 a GDPR).

If cookies are not required, you will be asked for your consent to the setting of cookies.

If you visit the login page of my website – for which there is no reason, as this page is only used to administer the website – a technically necessary cookie called wordpress_test_cookie is stored when you visit the login page to check whether your browser accepts cookies. This cookie becomes invalid after you close the website and can no longer be read. I do not actually have to mention this because my login page is not an offer to you and the address is not public.

The use of cookies serves my legitimate interest, which predominates in the context of a balancing of interests, in an optimized provision of my offer in accordance with Art. 6 para. 1 f GDPR.

3. hosting of the website

As part of processing on my behalf, a third-party provider based within a country of the European Union provides me with the services for hosting and displaying the website and provides the infrastructure for this purpose. In doing so, I or my hosting provider process all data that is generated in the course of using my website. This is primarily the inevitable usage data of interested parties and visitors to my website.

The processing is based on my legitimate interest in an efficient and secure provision of this online offer (Art. 6 para. 1 f GDPR in conjunction with Art. 28 GDPR).

4. communication by e-mail

If you contact me by email, your email address will be collected for technically necessary reasons and thus out of legitimate interest. The same applies if I write to you and have received your e-mail address either from you or from a public or authorized source.

Your e-mail address and the content of your e-mail will not be passed on to third parties unless this is required for the occasion, requested or explicitly permitted by you, or unless this results from another legal provision.

I delete e-mails received after a few months if they are no longer required or if the last communication has already ended several months ago and there is no prospect of continuing the communication. I also delete e-mails earlier if they are irrelevant, have become irrelevant or a justified request for deletion has been made.

 

III. How long will your data be stored?

The data processed by me is processed, deleted or its processing restricted by me in accordance with Art. 17 and Art. 18 GDPR. As a matter of principle, I only store your personal data that is generated when you use this website for as long as this is necessary for the stated purposes. However, if statutory retention obligations prevent deletion, the processing of the data will only be restricted, i.e. it will be blocked for further use and cannot be processed for other purposes.

The following proof and retention obligations are particularly relevant: 6 years in accordance with Section 257 (1) HGB (for trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.), 10 years in accordance with Section 147 (1) AO (books, records, accounting documents, commercial and business letters, documents relevant for taxation, etc.). In addition, personal data may be stored for the period during which claims can be asserted against me (statutory limitation period of three or up to thirty years).

 

IV. What do I process your data for (purpose of processing) and on what legal basis?

I process the data that is generated when you visit this website or use the contact options offered in accordance with the provisions of the GDPR and the German Federal Data Protection Act (BDSG). Depending on the matter for which you contact me via the website, there are different legal bases for this. The specific legal basis for data processing depends on the context and purpose for which I receive your data. As a rule, the legal basis for data processing results from the following possibilities:

Art. 6 para. 1 a GDPR serves as the legal basis for processing operations for which I require your consent for a specific processing purpose. You can withdraw your consent at any time.

If the processing of personal data is necessary for the performance of a contract to which you are a party, the processing is based on Art. 6 para. 1 b GDPR.

If I am subject to a legal obligation which requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 para. 1 c GDPR.

Ultimately, processing operations could be based on Art. 6 para. 1 f GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by me or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

 

V. Disclosure of your personal data to third parties?

IP addresses are automatically transmitted to the server from which the website is provided when you visit a website. These IP addresses are inevitably passed on to third parties whenever a third-party component (a script, an image, a font, another digital resource) is integrated on the website. The components integrated on this website are listed in this privacy policy. The recipients of your IP address or categories of recipients can also be derived from this.

Your personal data will not be transferred to third parties for purposes other than those listed below. I only pass on your personal data to third parties if:

• you have given your express consent to this in accordance with Art. 6 para. 1 a GDPR,
• the disclosure pursuant to Art. 6 para. 1 f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 c GDPR, and
• this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 b GDPR.

VI. What data protection rights do you have?

You have the right

• to request information about your personal data processed by me in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by me, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by me
• in accordance with Art. 17 GDPR, to request the erasure of your personal data stored by me, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims
• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and I no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to me in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller
• in accordance with Art. 7 para. 3 GDPR, to revoke your consent once given to me at any time. As a result, I may no longer continue the data processing that was based on this consent in the future;
• pursuant to Art. 77 GDPR, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR;
• if the GDPR applies, you have the right to lodge a complaint with the FDPIC.

Withdrawal of consent given by you

You can withdraw your consent at any time. You will find revocation options at the relevant point (e.g. for the newsletter or where consent is given). If you do not find a consent query (often referred to as a “cookie banner”), there are no processes legitimized by this on the website.

Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.

 

VII. What must be observed when linking to other websites?

My website contains links to third-party websites or to other websites under my responsibility. If you follow a link to one of the websites outside my responsibility, please note that these websites have their own privacy policies and that I do not accept any responsibility or liability for these policies. Please check these privacy policies before you voluntarily submit any personal data to these websites.

External links are clearly marked with an additional symbol after the link text.

Only when you click on an external link will data be transmitted to the link destination.

This is technically necessary due to the protocol on which the Internet is based (TCP/IP = TCP – Transfer Control Protocol + IP – Internet Protocol). The data transmitted are in particular Your IP address, the time at which you clicked on the link, the page on which you clicked on the link as well as other information mentioned under para. II no. 1 of these notes.

Clicking on individual links may involve the transfer of data to third parties. As a result, it is possible that third parties, authorities or secret services may receive connection data. Should Donald Trump become President of the USA again, he may also have the opportunity to gain knowledge or even bring this about. If you do not want the aforementioned data to be transmitted to the link destination or to the aforementioned third parties or to be accessed by others, do not click on the link.

 

VIII. Changes to this data protection notice

I reserve the right to change this data protection information if the legal situation or this online offer or the type of data collection changes. However, this only applies to declarations on data processing. If the user’s consent is required or parts of the data protection information contain a regulation of the contractual relationship with users, the data protection information will only be changed with the user’s consent.

Therefore, please inform yourself about this data protection notice if necessary, especially if you provide personal data.

 

 

Source: With adaptations, based on https://dr-dsgvo.de/