Datenschutz | Georg Steidinger

Responsible within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Georg Steidinger

Römerstr. 30

D-82049 Pullach

Your Data Subject Rights

You can exercise the following rights at any time using the contact details of our data protection officer:

Information about your data stored with us and its processing (Art. 15 GDPR),
Correction of incorrect personal data (Art. 16 GDPR),
Deletion of your data stored with us (Art. 17 GDPR),
Restriction of data processing, provided we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
Objection to the processing of your data with us (Art. 21 GDPR), and
Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can revoke it at any time with effect for the future.

You can always lodge a complaint with a supervisory authority, e.g., the competent supervisory authority of the federal state of your residence or the authority responsible for us as the responsible body.

A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Collection of General Information When Visiting Our Website

Type and Purpose of Processing:

When you access our website, i.e., if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address, and similar.

They are processed in particular for the following purposes:

Ensuring a problem-free connection to the website,
Ensuring smooth use of our website,
Evaluation of system security and stability, and
For other administrative purposes.

We do not use your data to draw conclusions about your person. Information of this kind is statistically evaluated by us, if necessary, to optimize our internet presence and the technology behind it.

Legal Basis:

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website.

Recipients:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage Duration:

The data will be deleted as soon as it is no longer required for the purpose of collection. For the data that serves to provide the website, this is generally the case when the respective session is ended.

Provision Prescribed or Required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be limited. For this reason, an objection is excluded.

Type and Purpose of Processing:

Like many other websites, we also use so-called “cookies.” Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.

Through this, we receive certain data such as IP address, browser used, and operating system.

Cookies cannot be used to start programs or transmit viruses to a computer.

Type and Purpose of Processing:

Like many other websites, we also use so-called “cookies.” Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.

Through this, we receive certain data such as IP address, browser used, and operating system.

Cookies cannot be used to start programs or transmit viruses to a computer. Based on the information contained in cookies, we can facilitate your navigation and enable the correct display of our websites.

In no case will the data we collect be passed on to third parties or linked to personal data without your consent.

Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can disable the use of cookies at any time via the settings of your browser. Please use the help functions of your internet browser to learn how to change these settings. Please note that individual functions of our website may not work if you have disabled the use of cookies.

Storage Duration and Used Cookies:

If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

If these cookies (also) concern personal data, we will inform you about this in the following sections.

You can delete individual cookies or the entire cookie inventory via your browser settings. In addition, you will receive information and instructions on how these cookies can be deleted or their storage blocked in advance. Depending on the provider of your browser, you will find the necessary information under the following links:

Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-delete-data-remove-websites
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Google Chrome: https://support.google.com/accounts/answer/61416?hl=en
Opera: http://www.opera.com/help
Safari: https://support.apple.com/kb/PH17191?locale=en_US&viewlocale=en_US

Registration on Our Website

Type and Purpose of Processing:

When registering to use our personalized services, some personal data is collected, such as name, address, contact, and communication data (e.g., phone number and email address). If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option to change or delete the data provided during registration at any time. Of course, we will also provide you with information about the personal data we have stored about you at any time.

Legal Basis:

The processing of the data entered during registration is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).

If the registration serves to fulfill a contract to which the data subject is a party or to carry out pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.

Recipients:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage Duration:

Data will only be processed in this context as long as the corresponding consent is in place. After that, they will be deleted, provided there are no statutory retention obligations. To contact us in this context, please use the contact details provided at the end of this privacy policy.

Provision Prescribed or Required:

The provision of your personal data is voluntary, solely based on your consent. Without the provision of your personal data, we cannot grant you access to our offered content and services.

Type and Purpose of Processing:

Your data will be used solely to deliver the subscribed newsletter to you via email. Providing your name allows us to address you personally in the newsletter and, if necessary, identify you if you wish to exercise your rights as a data subject.

To receive the newsletter, it is sufficient to provide your email address. When subscribing to our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed via email about circumstances relevant to the service or registration (e.g., changes to the newsletter offer or technical conditions).

For effective registration, we need a valid email address. To verify that a subscription is genuinely made by the owner of an email address, we use the “double opt-in” procedure. This involves logging the newsletter request, sending a confirmation email, and receiving the requested response. No further data is collected. The data is used exclusively for sending the newsletter and is not shared with third parties.

Legal Basis:

Based on your explicit consent (Art. 6 para. 1 lit. a GDPR), we will regularly send you our newsletter or similar information via email to the address you provided.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. Each newsletter contains a corresponding link for this purpose. Additionally, you can unsubscribe at any time directly on this website or inform us of your revocation via the contact details provided at the end of this privacy notice.

Recipients:

Recipients of the data may include data processors.

Storage Duration:

The data will only be processed in this context as long as the corresponding consent is in place. After that, they will be deleted.

Provision Prescribed or Required:

Providing your personal data is voluntary and based solely on your consent. Without existing consent, we cannot send you our newsletter.

Contact Form

Type and Purpose of Processing:

The data you enter will be stored for the purpose of individual communication with you. For this, it is necessary to provide a valid email address and your name. This information is used to assign the inquiry and respond to it. Providing additional data is optional.

Legal Basis:

The processing of the data entered into the contact form is based on a legitimate interest (Art. 6 para. 1 lit. f GDPR). By providing the contact form, we aim to facilitate easy communication with you. The information you provide will be stored for the purpose of processing the inquiry and for possible follow-up questions.

If you contact us to request an offer, the processing of the data entered into the contact form is carried out to perform pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Recipients:

Recipients of the data may include data processors.

Storage Duration:

Data will be deleted no later than 6 months after processing the inquiry. If a contractual relationship is established, we are subject to the statutory retention periods under the German Commercial Code (HGB) and will delete your data after these periods have expired.

Provision Prescribed or Required:

Providing your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, email address, and the reason for your inquiry.

Use of Google Analytics

Nature and Purpose of Processing: This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses so-called “cookies,” which are text files placed on your computer that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to and stored on a server in the USA. Due to the activation of IP anonymization on these websites, your IP address will be shortened by Google within member states of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.

The purposes of data processing are to evaluate the use of the website and compile reports on website activities. Based on the use of the website and the internet, further related services will then be provided.

Legal Basis: Data processing is based on user consent (Art. 6 Para. 1 lit. a GDPR).

Recipient: The recipient of the data is Google as a processor. We have concluded the corresponding order processing contract with Google for this purpose.

Data Retention Period: Data will be deleted as soon as it is no longer required for our recording purposes.

Third Country Transfer: Google processes your data in the USA and has subjected itself to the EU-US Privacy Shield 1.

Provision Prescribed or Required: The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.

Revocation of Consent: You can prevent the storage of cookies by adjusting your browser software accordingly; however, please note that in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: Browser Add-On to deactivate Google Analytics. Additionally, or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking this link. An opt-out cookie will be installed on your device, preventing the collection of your data by Google Analytics for this website and this browser in the future, as long as the cookie remains installed in your browser.

Profiling: With the help of the Google Analytics tracking tool, the behavior of website visitors can be evaluated and interests analyzed. For this purpose, we create a pseudonymous user profile.

Use of Script Libraries (Google Web Fonts): Nature and Purpose of Processing: To display our content correctly and graphically appealing across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) on this website for font display. You can find the privacy policy of the library operator Google here: Google Privacy Policy.

Legal Basis: The legal basis for integrating Google Web Fonts and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).

Recipient: Calling script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible – but currently unclear whether and for what purposes – that the operator, in this case, Google, collects data.

Data Retention Period: We do not collect any personal data through the integration of Google Web Fonts. For more information about Google Web Fonts, see Google Web Fonts FAQ and the Google Privacy Policy.

Third Country Transfer: Google processes your data in the USA and has subjected itself to the EU-US Privacy Shield 1.

Provision Prescribed or Required: The provision of personal data is neither legally nor contractually required. However, the correct display of content using standard fonts may not be possible.

Revocation of Consent: To display content, the programming language JavaScript is regularly used. You can therefore object to data processing by disabling JavaScript execution in your browser or installing a JavaScript blocker. Please note that this may result in functional restrictions on the website.

Use of Google Maps Nature and Purpose of Processing: On this website, we use the offer of Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This allows us to display interactive maps directly on the website and enables you to conveniently use the map function.

For more information about data processing by Google, please refer to Google’s privacy policy. You can also change your personal privacy settings in the privacy center.

Detailed instructions on managing your data in connection with Google products can be found here.

Legal Basis: The legal basis for integrating Google Maps and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).

Recipient: By visiting the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account.

If you do not want the assignment in your Google profile, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for advertising, market research, and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Data Retention Period: We do not collect any personal data through the integration of Google Maps.

Third Country Transfer: Google processes your data in the USA and has subjected itself to the EU-US Privacy Shield 1.

Revocation of Consent: If you do not want Google to collect, process, or use data about you via our website, you can disable JavaScript in your browser settings. In this case, however, you may not be able to use our website or only to a limited extent.

Provision Prescribed or Required: The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.

Embedded YouTube Videos

Type and purpose of processing: On some of our web pages, we embed YouTube videos. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells YouTube which pages you visit. If you are logged into your YouTube account, YouTube can associate your browsing behavior with you personally. You can prevent this by logging out of your YouTube account beforehand. When a YouTube video is started, the provider uses cookies that collect information about user behavior. For more information on the purpose and scope of data collection and its processing by YouTube, please refer to the provider’s privacy policies. There you will also find further information about your related rights and settings options for protecting your privacy (https://policies.google.com/privacy)). Google processes your data in the USA and has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).

Legal basis: The legal basis for embedding YouTube and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).

Recipient: Calling up YouTube automatically triggers a connection to Google.

Storage duration and revocation of consent: If you have disabled cookie storage for the Google Ad program, you will not have to expect such cookies when watching YouTube videos either. However, even without these cookies from advertising programs, non-personal usage information is stored by other cookies from YouTube. If you want to prevent this as well, then blocking cookie storage in the browser must be done. For more information on privacy at “YouTube”, please refer to the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/.

Third-country transfer: Google processes your data in the USA and has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).

Provision prescribed or required: The provision of your personal data is voluntary based solely on your consent. If access is denied it may result in functional restrictions on websites.

Google AdWords

Type and purpose of processing: Our website uses Google Conversion Tracking. The service provider for Google AdWords is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our website via a Google ad, Google AdWords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on a Google ad. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can personally identify users.

Legal basis: The legal basis for embedding Google AdWords and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).

Recipient: Each time you visit our website, personal data, including your IP address, is transmitted to Google in the USA. These personal data are stored by Google. Google may transfer these personal data collected through the technical process to third parties. Our company does not receive any information from Google that could identify the data subject.

Storage duration: These cookies lose their validity after 30 days and are not used for personal identification.

Third-country transfer: Google processes your data in the USA and has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).

Revocation of consent: If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this – for example, by setting your browser to generally deactivate the automatic setting of cookies or to block cookies from the domain “googleleadservices.com”. Please note that you must not delete the opt-out cookies as long as you do not want measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

Provision prescribed or required: The provision of your personal data is voluntary, based solely on your consent. If access is denied, it may result in functional restrictions on the website.

Use of Google Remarketing

Type and purpose of processing: This website uses the remarketing function of Google Inc. The service provider for Google Remarketing is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). The function is used to present interest-based advertisements to visitors of the website within the Google advertising network. A so-called “cookie” is stored in the browser of the website visitor, which makes it possible to recognize the visitor when they visit websites that belong to the Google advertising network. On these pages, the visitor can be presented with advertisements related to content that the visitor previously accessed on websites that use Google’s remarketing function.

Legal basis: The legal basis for embedding Google Remarketing and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).

Revocation of consent: According to Google, no personal data is collected during this process. If you still do not wish to use Google’s remarketing function, you can generally deactivate it by making the appropriate settings at https://support.google.com/adwordspolicy/answer/143465. Alternatively, you can disable the use of cookies for interest-based advertising through the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

Provision prescribed or required: The provision of your personal data is voluntary, based solely on your consent. If access is denied, it may result in functional restrictions on the website.

SSL encryption: To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) over HTTPS.

Changes to our privacy policy: We reserve the right to adapt this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. For your next visit, the new privacy policy will apply.

Questions to the data protection officer: If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly.