Privacy Policy

1. Privacy Policy

As of: May 2018
Thank you for your interest in the portfolio of services offered online by Streitz Hoppen & Partner. This privacy policy will inform you on the nature, scope and purpose of the processing of your data.

In general, you can use our website without providing personal data. Where personal data (e.g. name, address or email address) are collected on our website, they may, wherever possible, be provided on a voluntary basis. These data will, in principle, not be forwarded to any third parties without your prior express consent.

We would like to point out that any data transfer on the internet (e.g. when communicating by email) may be compromised. The data cannot be protected completely against third-party access.

2. Name and Contact Data of the Controller

Controller:
STREITZ LIESEGANG WAGENPFEIL & PARTNER
IT Experts
Pingsdorfer Str. 54
50321 Brühl
Germany
Phone +49-2232–43076
Fax +49-2232–48720
E-Mail: info@slw-it.de
Internet www.slw-it.de
VAT identification number.: DE284053228
Register number/court: PR 2661, AG (Local Court of) Essen

Represented by the partners:
Dr. Siegfried Streitz
Wiegand Liesegang
Prof. Dr.-Ing. Stefan Wagenpfeil
Michael Schomisch
Carsten Gerlach
Michael Wollschläger

3. Data Protection Officer

Given the number of employees, Streitz Hoppen & Partner does not require a data protection officer to be designated in accordance with the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Upon request, we will be glad to inform you on our data protection measures.

4. Scope and Purpose of the processing of personal data

You may principally access our website without providing personal data. You are at any time free to decide whether or not to provide your personal data to us.

Under Article 14(1)(d) of the GDPR, the controller is obliged to inform the data subject on the parties involved and on the categories of personal data processed.

4.1. Personal data

Under Article 4(1) of the GDPR, personal data means any information relating to an identified or identifiable natural person. They include identifiers such as your name, your contact details, your IP address when accessing our website, and any data transferred to us via a contact form or in connection with the sign-up and login functions.

4.2. Contact (consultation by phone, email)

You may contact us by phone or by email and send messages to us. To be able to answer your questions we need some basic data. These data are solely processed for the purpose of a consultation by phone or email or for processing and answering inquiries and any other related communication.

The processing of these data is therefore based on a consent under Article 6(1(1)(a) of the GDPR and for the purpose of contract development and execution in accordance with Article 6(1)(1)(b) of the GDPR.

4.3. Server statistics

Each time our website is visited, data will automatically be transferred from the internet browser used to the Web server and be saved in log files. The following data are saved until deleted:

• Date and time of your visit
• Page visited or name of the file retrieved
• Referring site
• Data volume transferred
• Access status message (successful transfer and error messages, if applicable)
• Name and data of the browser used
• IP address of the retrieving system

Processing is made for the purpose of

• allowing a connection to the website,
• enabling an optimized display of the website,
• checking and ensuring system security and stability,
• allowing and improving website administration,
• preventing any abuse of our website, if necessary, and
• tracking unauthorized access.

The data saved will not be merged with other data sources. Usually, the data cannot be assigned to identifiable persons. The data are, in principle, not processed for the purpose of gathering further information on the individual visitors of our website.

We reserve the right to review these data if there is specific reason to suspect the illicit use of our website.
Under Art. 6(1)(1)(f) of the GDPR, we have a legitimate interest in processing the data for the purpose of system maintenance and website optimization.

4.4. Cookies

Some webpages use so-called cookies. Cookies are small text files that are placed on your computer and stored by your browser.

Cookies serve to make our offer more user-friendly, efficient and secure. Most of the cookies used by us are so-called session cookies. They will be deleted automatically at the end of your visit. Other cookies remain stored on your computer until deleted. These cookies allow us to recognize your browser at your next visit.

You can configure your browser to alert you every time a cookie is placed on your computer or to allow cookies on a case-by-case basis, to refuse to accept cookies in certain cases or in general, or to delete cookies automatically when the browser is closed. However, if you deactivate cookies, you may not be able to use the full functionality of this website.

The processing of personal data by using cookies is legally based on our legitimate interest in accordance with Art. 6(1) of the GDPR.

4.5. Fathom Analytics

We have integrated Fathom Analytics into this website. The provider is Conva Ventures Inc., BOX 37058 Millstream PO Victoria, British Columbia, V9B 0E8, Canada.

Fathom Analytics enables us to analyze the usage patterns of visitors to our website. For this purpose, the IP address and the user agent is promptly anonymized after this information is recorded as the result of the generation of an individual hash. The hash value is archived for 48 hours at Hetzner in Germany. It is impossible to decode this hash. Fathom Analytics does not use any cookies and does not store any data that can be used to track or log visitors.

According to the information provided by Fathom Analytics, all data generated within the EU is retained on servers within the EU.

Our company uses Fathom Analytics on the basis of Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in the anonymized analysis of user patterns, along with an interest in optimizing the operator’s web offerings. If a pertinent declaration of consent has been requested, processing shall occur exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TTDSG if such consent includes the storage of cookies or the granting of consent for access to information on the user’s device (e.g., device fingerprinting) as defined in the TTDSG.

4.6 Google Fonts (local embedding)

This website uses so-called Google Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application. For more information on Google Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

5. Disclosure of data

Within the context of the operation of this website, personal data are, in principal, only disclosed to a third party, if

• the data subject has given his or her explicit consent in accordance with Art. 6(1)(1)(a) of the GDPR,
• disclosure is required for asserting, exercising or protecting legal claims and if there is no reason to assume that such interests are overridden by the interests of the data subject which require non-disclosure of personal data in accordance with Art. 6(1)(1)(f) of the GDPR.
• disclosure is necessary for compliance with a legal obligation under Art. 6(1)(1)(c) of the GDPR, and/or
• disclosure is necessary for the performance of a contract to which the data subject is party in accordance with Art. 6(1)(1)(b) of the GDPR.

6. Your rights as data subject

If your personal data are processed within the context of your visit to our website or in connection with the request for information or with contract development or execution you as “data subject” in the sense of the GDPR have the following rights:

6.1. Right of access

You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed by us. The right of access does not apply, however, if the data must not be deleted for reasons of legal or statutory retention periods or if they merely serve the purpose of data backup or of monitoring data protection where providing information would require disproportionate effort and data processing for other purposes by suitable technical and organizational measures is impossible.
You may demand information on:

• the purpose of the processing,
• the categories of personal data concerned
• the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period,
• the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing • the right to lodge a complaint with a supervisory authority,
• where the personal data are not collected from you, any available information as to their source,
• the existence of automated decision-making, including profiling and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such automated decision-making,
• Where personal data are transferred to a third country recipient, the data subject shall – provided that the European Commission has not taken a decision on an adequate level of protection under Art. 45(3) of the GDPR – have the right to be informed of the appropriate safeguards pursuant to Art. 46(2) of the GDPR relating to the transfer.

6.2. Rectification and completion

If you notice that we have inaccurate personal data concerning you, you have the right to obtain from us the rectification of inaccurate personal data. Additionally, you have the right to have incomplete personal data completed.

6.3. Erasure

You have the right to erasure (“right to be forgotten”) where one of the following grounds applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
• you withdraw consent on which the processing is based,
• you object to the processing of your personal data published by us,
• you object to the processing of your personal data not published by us and there is no overriding legitimate interest in the processing,
• your personal data have been unlawfully processed,
• the personal data have to be erased for compliance with a legal obligation to which we are subject.

The right to erasure does not apply if in a case of nonautomated data processing erasure is impossible or only possible with a disproportionate effort due to the specific mode of storage, and if your interest in erasure is minimal. In this case, the right to erasure is replaced with a right to restriction. Neither is there a right to erasure if the data must be retained for legal reasons (e.g. for tax regulations).

6.4. Restriction of processing

You have the right to obtain from us restriction of processing where one of the following applies:

• you contest the accuracy of the personal data. In this case restriction may be requested for a period enabling us to verify the accuracy of the personal data.
• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
• we no longer need your personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims.
• you have objected to processing pursuant to Article 21(1) of the GDPR. Restriction may be demanded pending the verification whether our legitimate grounds override yours.

Restriction of processing means that personal data shall only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest. We shall inform you before lifting the restriction of processing.

6.5. Right to data portability

You have a right to data portability provided that the processing is based on your consent pursuant to Article 6(1)(1)(a) or Article 9(2)(a) of the GDPR or on a contract to which you are a party and the processing is carried out by automated means. In this case, the right to data portability includes the following rights provided that the rights and freedoms of others are not adversely affected:

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You have the right to transmit those data to another controller without hindrance from us. You have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

6.6. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority competent for your habitual residence or place of work or place of the alleged infringement if you consider that the processing of your personal data is illegitimate.

6.7. Right to object

You have the right to withdraw your consent to the processing of your personal data at any time. You may inform us of the withdrawal of your consent by:

• Phone +49-2232–43076
• Fax +49-2232–48720
• Email: info@slw-it.de

7. Data transfer to third countries

Where we transfer personal data to third country recipients outside the European Economic Area (EEA), such transfer will only take place if the European Commission has confirmed that such third country maintains an adequate data protection level or if other appropriate data protection safeguards are in place (e.g. binding data protection regulations within the company concerned or EU standard contractual clauses).

Transfer of personal data to countries outside the EU/EEA is only made within the context of the use of Google Analytics.

8. Retention period

Personal data are deleted or blocked as soon as the reason for retention does no longer exist. Further retention may be required if there is a legal obligation and if the data are needed for contract conclusion or execution or for enforcing legal claims.

9. Objection to commercial emails

We object to the use of our contact data published for compliance with the obligation to publish a legal notice for the purpose of sending us unsolicited commercial emails and information material. The website operator explicitly reserves the right to take legal action in the case of the unsolicited sending of commercial information, e.g. by spam emails.