1. Data Protection at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is all information that can be used to personally identify you. For detailed information on data protection, please refer to our privacy policy listed below this text.
Data Collection on this Website
Who is responsible for the data collection on this website?
The data processing on this website is carried out by the website operator. You can find the contact details of the operator in the section “Information about the responsible party” in this privacy policy.
How do we collect your data?
Your data is collected in part when you provide it to us, for example by entering data into a contact form.
Other data is automatically or with your consent collected by our IT systems when you visit the website. These are primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter the website.
How do we use your data?
Some of the data is collected to ensure the website is provided correctly. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right at any time to obtain free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can withdraw this consent at any time for the future. Additionally, you have the right to request the restriction of processing your personal data under certain circumstances. Furthermore, you have the right to file a complaint with the responsible supervisory authority.
For any questions regarding data protection, you can always contact us.
Analysis Tools and Third-Party Tools
When you visit this website, your browsing behavior may be statistically evaluated. This is mainly done with so-called analysis programs.
Detailed information on these analysis programs can be found in the following privacy policy.
2. Hosting
We host the content of our website with the following provider:
…kataplonk.de – Datentechnik
The provider is …kataplonk.de – Datentechnik, Industriestraße 18, 26689 Augustfehn (hereinafter referred to as kataplonk.de). When you visit our website, kataplonk.de collects various log files, including your IP addresses.
Details can be found in the privacy policy of kataplonk.de: https://www.kataplonk.de/kontakt/datenschutz/.
The use of kataplonk.de is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in ensuring the reliable display of our website. If consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, to the extent that the consent includes the storage of cookies or access to information on the user’s device (e.g., for device fingerprinting) as per the TTDSG. The consent can be revoked at any time.
Order Processing
We have entered into a data processing agreement (DPA) for the use of the aforementioned service. This is a legally required contract that ensures that kataplonk.de processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
3. General Information and Mandatory Information
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this happens.
We point out that data transmission over the internet (e.g., communication via email) may have security vulnerabilities. A complete protection of the data from access by third parties is not possible.
Information about the Responsible Party
The responsible party for data processing on this website is:
Landhaus Fillerberg
c/o enamoja GmbH
Im Lager 53
26203 Wardenburg
Phone: (0 44 31) 99 02 -0
Email: info@landhaus-fillerberg.de
The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Storage Duration
Unless a more specific storage duration is mentioned within this privacy policy, your personal data will remain with us until the purpose for the data processing is no longer applicable. If you assert a legitimate request for deletion or withdraw consent to data processing, your data will be deleted, unless we have other legally permissible reasons to retain your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will occur after these reasons no longer apply.
General Information on the Legal Basis of Data Processing on this Website
If you have given consent to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, if special categories of data are processed according to Art. 9 para. 1 GDPR. In case of explicit consent for the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing is additionally based on § 25 para. 1 TTDSG. Consent can be revoked at any time. If your data is necessary for the fulfillment of a contract or the performance of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if it is necessary for the fulfillment of a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. Data processing may also be based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR. Further details on the applicable legal bases for processing will be explained in the following sections of this privacy policy.
Note on Data Transfer to the USA and Other Third Countries
We use tools from companies based in the USA or other countries that do not offer a comparable level of data protection. If these tools are active, your personal data may be transferred to and processed in these third countries. We point out that no comparable level of data protection can be guaranteed in these countries. For example, US companies are required to disclose personal data to security authorities without you having the ability to contest this in court. It cannot be excluded that US authorities (e.g., intelligence agencies) process, analyze, and permanently store data located on US servers for surveillance purposes. We have no influence over these processing activities.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You can revoke any consent already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)
IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RELEVANT LEGAL BASIS FOR THE PROCESSING IS PROVIDED IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGAL REASONS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21 PARA. 1 GDPR).
Complaint Right to the Responsible Supervisory Authority
In case of violations of the GDPR, affected persons have the right to file a complaint with a supervisory authority, especially in the EU member state of their habitual residence, place of work, or place of the alleged violation. The complaint right exists without prejudice to other administrative or judicial remedies.
Right to Data Portability
You have the right to request that data we process based on your consent or in fulfillment of a contract be handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will only be done if technically feasible.
Access, Correction, and Deletion
You have the right, at any time, to obtain free information about the personal data we have stored about you, including its origin, recipients, and the purpose of processing, and if applicable, the right to correct or delete this data. You can contact us at any time for further questions regarding your personal data.
Right to Restriction of Processing
You have the right to request the restriction of processing of your personal data. You can contact us at any time for this. The right to restrict processing exists in the following cases:
-
If you dispute the accuracy of your personal data stored with us, we generally need time to verify this. During the verification process, you have the right to request the restriction of processing your personal data.
-
If the processing of your personal data is unlawful, you can request the restriction of processing instead of deletion.
-
If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of processing instead of deletion.
-
If you have filed an objection according to Art. 21 para. 1 GDPR, an assessment must be made
If you have restricted the processing of your personal data, such data may only be processed – apart from its storage – with your consent or for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for important public interest reasons of the European Union or a member state.
4. Data Collection on This Website
Server Log Files
The provider of the site automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These are:
-
Browser type and version
-
Operating system used
-
Referrer URL
-
Hostname of the accessing computer
-
Time of server request
-
IP address
This data is not merged with other data sources.
The collection of this data is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the technically error-free display and optimization of their website – for this purpose, server log files must be collected.
Contact Form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact information you provide there, will be stored by us for the purpose of processing the inquiry and for the case of follow-up questions. We will not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) lit. b GDPR, if your inquiry is related to the fulfillment of a contract or is necessary for the execution of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively processing the inquiries addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) if it has been requested; consent can be withdrawn at any time.
The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent for storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been processed). Mandatory statutory provisions – especially retention periods – remain unaffected.
Inquiry via Email, Phone, or Fax
If you contact us via email, phone, or fax, your inquiry, including all personal data resulting from it (name, inquiry), will be stored and processed by us for the purpose of handling your concern. We will not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) lit. b GDPR, if your inquiry is related to the fulfillment of a contract or is necessary for the execution of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively processing the inquiries addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) if it has been requested; consent can be withdrawn at any time.
The data you send us via contact inquiries will remain with us until you request its deletion, withdraw your consent for storage, or the purpose for storing the data no longer applies (e.g., after your concern has been processed). Mandatory statutory provisions – especially legal retention periods – remain unaffected.
5. Plugins and Tools
Google Maps
This site uses the Google Maps service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
In order to use the features of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. When Google Maps is activated, Google may use Google Fonts for the purpose of uniform font representation. When you access Google Maps, your browser loads the required web fonts into its browser cache to correctly display texts and fonts.
The use of Google Maps is in the interest of providing an appealing display of our online offerings and facilitating the easy location of the places indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. If consent has been requested, processing is solely based on Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG, as long as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of TTDSG. Consent can be withdrawn at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
More information on handling user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.
hCaptcha
We use hCaptcha (hereinafter referred to as “hCaptcha”) on this website. The provider is Intuition Machines, Inc., 2211 Selig Drive, Los Angeles, CA 90026, USA (hereinafter referred to as “IMI”).
hCaptcha is used to verify whether the data entry on this website (e.g., in a contact form) is made by a human or by an automated program. For this purpose, hCaptcha analyzes the behavior of the website visitor based on various characteristics.
This analysis starts automatically as soon as the website visitor enters a website with activated hCaptcha. For analysis, hCaptcha evaluates various information (e.g., IP address, duration of the website visit, or mouse movements made by the user). The data collected during the analysis is transmitted to IMI. If hCaptcha is used in “invisible mode,” the analysis runs entirely in the background. Website visitors are not notified that an analysis is taking place.
The storage and analysis of the data is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in protecting their web offerings from abusive automated data extraction and SPAM. If consent has been requested, processing is solely based on Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG, as long as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of TTDSG. Consent can be withdrawn at any time.
Data processing is based on standard contractual clauses contained in the data processing agreement in IMI’s general terms and conditions or the data processing contracts.
Further information on hCaptcha can be found in the privacy policy and terms of use at the following links: https://www.hcaptcha.com/privacy and https://hcaptcha.com/terms.
Ninja Firewall
We have integrated Ninja Firewall on this website. The provider is NinTechNet Limited, Unit 1603, 16th Floor, The L. Plaza 367 – 375 Queen‘s Road Central Sheung Wan, Hong Kong (hereinafter referred to as Ninja Firewall).
Ninja Firewall is used to protect our website from unwanted access or malicious cyberattacks. For this purpose, Ninja Firewall collects IP address, request, referrer, and the time of the page access. Ninja Firewall is integrated on our own servers and does not transmit personal data to the provider of the tool or other third parties.
The use of Ninja Firewall is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in providing effective protection of their website against cyberattacks.
Source: https://www.e-recht24.de