Data Protection:
Data transmitted to us via the Internet may potentially be intercepted and accessed by third parties during transmission. Within our organization, data is treated with strict confidentiality in accordance with data protection regulations. Detailed information can be found here..
Severability clause:
Should parts or individual provisions of this text not comply, or no longer comply, or not fully comply with the applicable legal situation, the content and validity of the remaining parts of the document shall remain unaffected.
Copyright and Trademark Law:
All brand names and trademarks mentioned or used on this website are the property of their respective registered owners. The copyright for published material created by the operator remains solely with the operator, unless expressly stated otherwise. The reproduction or use of such graphics, images, texts, audio documents, or video sequences in other electronic or printed publications (or for commercial purposes) is not permitted without the express consent of the operator and is subject to legal prosecution.
Copyright:
Any reproduction or use of the images, photos, graphics, media files, and texts in other electronic or printed publications is prohibited without express written consent. Copying, forwarding, or reproducing the entire website or parts thereof (including printing onto paper) is permitted solely for personal viewing.
References and links:
In a judgment dated May 12, 1998, the Regional Court of Hamburg ruled that by including a link, one may be held jointly liable for the content of the linked page. This can only be prevented by expressly distancing oneself from such content. Links to other websites have been included on this page. At the time the links were created, the linked pages were free of illegal content. The following applies to all these links:
The operator hereby expressly declares that he has no influence whatsoever on the current or future design or content of the linked pages. Therefore, he hereby expressly dissociates himself from all content on all pages linked to from this site. This declaration applies to all displayed links and to all content, guestbooks, discussion forums, and mailing lists associated with the pages reached via registered banners and links.
[/vc_column_text][/vc_column][vc_column][vc_column_text]
Data Protection
[/vc_column_text][vc_column_text]
Introduction
With the following privacy policy, we would like to inform you about the types of personal data concerning you (hereinafter also referred to simply as “data”) that we process, as well as the purposes and scope of such processing. This privacy policy applies to all processing of personal data carried out by us—whether in the course of providing our services or, in particular, on our websites, in mobile applications, and within external online presences such as our social media profiles (hereinafter collectively referred to as the “online service”).
The terms used are gender-neutral.
As of May 15, 2022
Responsible parties
Lilith Slomka
Praetoriusweg 3
30655 Hanover
Email address: info@stay-on-track.de
Overview of processing activities
The following overview summarizes the types of data processed and the purposes of their processing, and refers to the data subjects.
Types of data processed
Categories of data subjects
Purposes of processing
Relevant legal bases
Below is an overview of the legal bases under the GDPR upon which we process personal data. Please note that, in addition to the provisions of the GDPR, national data protection regulations in your country of residence or our country of domicile may also apply. Furthermore, should more specific legal bases be relevant in individual cases, we will inform you of these in the privacy policy.
In addition to the data protection regulations of the General Data Protection Regulation (GDPR), national data protection regulations apply in Germany. These include, in particular, the Federal Data Protection Act (*Bundesdatenschutzgesetz* – BDSG). The BDSG contains specific provisions regarding the right of access, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes, data transmission, and automated individual decision-making (including profiling). Furthermore, it governs data processing in the context of employment relationships (Section 26 BDSG), particularly regarding the establishment, implementation, or termination of employment relationships and employee consent. State data protection laws of the individual federal states may also apply.
Safety measures
In accordance with legal requirements, and taking into account the state of the art, implementation costs, the nature, scope, circumstances, and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.
The measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data, as well as controlling access to, input of, and disclosure of the data, and ensuring its availability and segregation. Furthermore, we have established procedures to ensure the exercise of data subjects' rights, the deletion of data, and responses to risks threatening the data. In addition, we take the protection of personal data into account during the development or selection of hardware, software, and processes, in accordance with the principles of data protection by design and data-protection-friendly default settings.
SSL encryption (https): To protect the data transmitted via our online service, we use SSL encryption. You can recognize such encrypted connections by the prefix "https://" in your browser's address bar.
Transmission of personal data
In the course of processing personal data, such data may be transmitted to or disclosed to other entities, companies, legally independent organizational units, or individuals. Recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content integrated into a website. In such cases, we comply with legal requirements and, in particular, enter into appropriate contracts or agreements with the recipients of your data to ensure its protection.
Data processing in third countries
If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or if processing takes place in the context of using third-party services or disclosing or transmitting data to other persons, entities, or companies, this is done only in accordance with legal requirements.
Subject to explicit consent or where transfer is required by contract or law, we only process or have data processed in third countries with a recognized level of data protection, contractual obligations through so-called standard contractual clauses of the EU Commission, in the presence of certifications or binding internal data protection regulations (Articles 44 to 49 GDPR, EU Commission information page: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).
Deletion of data
The data processed by us will be deleted in accordance with legal requirements as soon as the consents permitting their processing are revoked or other authorizations cease to apply (e.g., if the purpose of processing such data no longer exists or the data are no longer required for that purpose).
Unless the data are deleted because they are required for other, legally permissible purposes, their processing will be restricted to those purposes. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons, or whose storage is necessary for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person.
Our privacy notices may also contain further information regarding the retention and deletion of data that take precedence for the respective processing activities.
Use of cookies
Cookies are small text files or similar storage markers that store information on end devices and retrieve information from them—for example, to save the login status of a user account, the contents of a shopping cart in an online shop, or the content viewed or functions used within an online service. Furthermore, cookies can be used for various purposes, such as ensuring the functionality, security, and usability of online services, as well as analyzing visitor traffic.
Notes on consent: We use cookies in accordance with legal requirements. We therefore obtain prior consent from users, unless such consent is not required by law. In particular, consent is not necessary when the storage and retrieval of information—including cookies—are strictly required to provide users with a telemedia service (i.e., our online offering) that they have expressly requested. This revocable consent is clearly communicated to users and includes information regarding the specific use of cookies.
Information on legal bases under data protection law: The legal basis under data protection law upon which we process users' personal data using cookies depends on whether we ask users for their consent. If users provide consent, the legal basis for processing their data is that declared consent. Otherwise, data processed via cookies is handled based on our legitimate interests (e.g., the economic operation of our online services and the improvement of their usability) or—where this occurs in the context of fulfilling contractual obligations—when the use of cookies is necessary to meet those obligations. We explain the purposes for which we process cookies elsewhere in this privacy policy or within the scope of our consent and processing procedures.
Retention period: With regard to the storage duration, a distinction is made between the following types of cookies:
General information on revocation and objection (opt-out): Users can revoke the consent they have given at any time and can also object to the processing in accordance with the legal requirements in Article 21 GDPR (further information on objections can be found in this data protection declaration). Users can also declare their objection using their browser settings.
Further information on processing processes, procedures and services:
Provision of online offerings and web hosting
In order to be able to provide our online offering securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers managed by them) the online offering can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services as well as security and technical maintenance services.
The data processed as part of the provision of the hosting offer may include all information relating to the users of our online offer that arises in the context of use and communication. This regularly includes the IP address, which is necessary to be able to deliver the content of online offerings to browsers, and all entries made within our online offering or on websites.
Further information on processing processes, procedures and services:
Contact and inquiry management
When you contact us (e.g. via contact form, e-mail, telephone or via social media) as well as within the framework of existing user and business relationships, the information provided by the inquiring persons is processed to the extent that this is necessary to answer the contact inquiries and any requested measures.
Answering contact inquiries and managing contact and inquiry data within the framework of contractual or pre-contractual relationships is carried out to fulfill our contractual obligations or to answer (pre-)contractual inquiries and otherwise on the basis of the legitimate interests in answering inquiries and maintaining user or business relationships.
Further information on processing processes, procedures and services:
Presences in social networks (social media)
We maintain online presences within social networks and process user data in this context in order to communicate with active users there or to offer information about us.
We would like to point out that user data may be processed outside the European Union. This can result in risks for users because, for example, it could make it more difficult to enforce users' rights.
Furthermore, user data within social networks is usually processed for market research and advertising purposes. For example, usage profiles can be created based on usage behavior and the resulting interests of users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data can also be stored in the usage profiles regardless of the devices used by the users (particularly if the users are members of the respective platforms and are logged in to them).
For a detailed description of the respective forms of processing and the options for objection (opt-out), we refer to the data protection declarations and information provided by the operators of the respective networks.
In the case of requests for information and the assertion of the rights of those affected, we would also like to point out that these can most effectively be asserted with the providers. Only the providers have access to user data and can take appropriate measures and provide information directly. If you still need help, you can contact us.
Further information on processing processes, procedures and services:
Plugins and embedded functions and content
We include functional and content elements in our online offering that are obtained from the servers of their respective providers (hereinafter referred to as “third-party providers”). This can be, for example, graphics, videos or city maps (hereinafter referred to as “content”).
The integration always requires that the third party providers of this content process the users' IP address, as without the IP address they would not be able to send the content to their browser. The IP address is therefore required to display this content or functions. We strive to only use content whose respective providers only use the IP address to deliver the content. Third parties may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offering, as well as being linked to such information from other sources.
Notes on legal bases: If we ask users for their consent to the use of third-party providers, the legal basis for processing data is consent. Otherwise, user data will be processed based on our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to draw your attention to the information on the use of cookies in this data protection declaration.
Further information on processing processes, procedures and services:
Changes and updates to the data protection declaration
We ask you to regularly inform yourself about the content of our data protection declaration. We will adapt the data protection declaration as soon as changes to the data processing we carry out make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.
If we provide addresses and contact information for companies and organizations in this data protection declaration, please note that the addresses may change over time and ask you to check the information before contacting us.
Rights of data subjects
As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Articles 15 to 21 GDPR:
Definitions of terms
This section provides an overview of the terms used in this data protection declaration. Many of the terms are taken from the law and are defined primarily in Article 4 GDPR. The legal definitions are binding. The following explanations, on the other hand, are intended primarily to provide understanding. The terms are sorted alphabetically.
Created with the free Data Protection Generator.de by Dr. Thomas Schwenke
