PRIVACY POLICY

Privacy policy

We take the protection of your data extremely seriously.

1. Name and contact information of the data controller

This privacy policy concerns the processing of data by

Controller:

WOLFFBERG Management Communication GmbH
 
Markt 10, D-04109 Leipzig, Germany
 
Email: willkommen@wolffberg.de
Tel: +49(0)341 33380
 

Data protection officer:

SIKKER Datenschutz & Compliance
Frank Hillmer

Emilienstrasse 15, D-04107 Leipzig, Germany
 
Tel: +49 (0)341 308246781
Fax: +49 (0)341 308246788
 

www.sikker.de
frank.hillmer@sikker.de

2. Collection and storage of personal data; type and purpose of use

When you visit our website, data are automatically sent to our website’s server by the browser on your device. They are recorded and stored temporarily in a logfile on the server until they are automatically deleted. This concerns the following data:
  • The IP address of your computer used to access our website
  • The date and time of access
  • The name and URL of the file accessed
  • The referrer URL (the webpage from which our website is accessed)
  • Your browser and, if applicable, your computer’s operating system, as well as the name of your internet service provider

We process the above data for the following purposes:

  • To ensure smooth connection with the website
  • To ensure the user-friendliness of our website
  • To evaluate system security and stability as well as for other administrative purposes


The legal basis for this data processing is point (f) of Article 6(1) GDPR. Our legitimate interest stems from the purposes of data processing set out above. We will never use data collected in this way to determine your personal identity. We may use cookies and analytics services when you visit our website; for more details, please see Section 4 of this privacy policy.

You can contact us using the telephone number, fax number and email address on our website as well as by filling in and sending us the contact form. We collect personal data whenever you actively contact us by using the contact form or by email, i.e. if you enter your name, address, contact details, etc. when visiting our website, you explicitly do so voluntarily. These data will not be coupled with the above-mentioned access data. If you contact us by telephone, we may collect personal data for other purposes which we are only informed of during the phone call. If we collect personal data from you using these means of communication and you have not yet been informed of their processing, we will notify you separately. Your information will be processed in order to take steps at your request prior to entering into a contract, for the performance of a contract, or if necessary for the purposes of legitimate interests pursued by us or a third party. The legal basis for this processing is points (b) and (f) of Article 6(1) GDPR. Our legitimate interest in processing data lies in dealing with your request if it is not based on steps prior to entering into a contract or the performance of the contract. This processing is not prejudiced by your legitimate interests or your fundamental rights and freedoms as the data was disclosed voluntarily and your rights as a data subject are ensured.

Furthermore, we will process your personal data if this is necessary for compliance with a legal obligation to which we are subject, such as requirements of supervisory authorities, or commercial and fiscal retention obligations. In this case, the legal basis is the legal regulation concerned in connection with point (c) of Article 6(1) GDPR.

If we wish to process your personal data for a purpose not specified above, we will notify you of this in advance in compliance with the statutory regulations.

3. Disclosure of data

Your personal data will not be disclosed to any third parties for any purposes other than those described below. We will only disclose your personal data to third parties:

  • If you have given your explicit consent pursuant to point (a) of Article 6(1) GDPR
  • If this is necessary for the establishment, exercise or defence of legitimate interests pursued by us and there is no reason to assume that you have an overriding, legitimate interest in your data not being disclosed pursuant to point (f) of Article 6(1) GDPR
  • If this is necessary for compliance with a legal obligation pursuant to point (c) of Article 6(1) GDPR
  • If this is legally permissible and necessary for the performance of a contract to which you are party pursuant to point (b)of Article 6(1) GDPR

4. Cookies

We use cookies – small text files which your browser saves automatically on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies won’t harm your device and don’t contain viruses, Trojans or other malware. Cookies store information about the device you use to access our website, but don’t enable us to identify your personally. One of their functions is to improve your browsing experience on our website. For example, we use session cookies to determine whether you’ve already visited certain pages of our website, and which are automatically deleted when you leave our website. We also use temporary cookies for more user-friendliness, and which are stored on your device for a specified period of time. If you return to our website, they will be used to recall information and settings from your last visit. In addition, we employ cookies to gather statistical information about your use of our website as this helps us to improve it (see Section 5). These cookies indicate whether you’ve visited our website before, and are automatically deleted after a defined period of time. The data processed by cookies are required for the purposes specified above to protect our legitimate interests and those of third parties pursuant to point (f) of Article 6(1) GDPR. Most browsers accept cookies by default. However, you can configure your browser so that cookies aren’t saved on your device or a popup warning appears before a new cookie is created. Please note that blocking all cookies may prevent you from using all the features of our website.

5. Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics saves cookies on your computer which enable your use of the website to be analysed. The data recorded (including your device’s IP address) are generally transmitted to a server belonging to Google in the USA and stored there. Google Analytics is configured such that IP addresses are always anonymized before being saved. This means that Google truncates IP addresses recorded in member states of the European Union or other signatory states of the Agreement on the European Economic Area. Google uses the information gathered in this way to evaluate the use of websites and to compile related reports. Google Analytics is configured such that the data are deleted within 14 months after being created. The data are processed on the basis of point (f) of Article 6(1) GDPR, the legitimate interest being the improvement of this website.

Although you can configure your browser to block Google Analytics cookies, please be aware that you may then not be able to use all the features of this website. A browser plug-in can also be used to prevent Google from recording data. In addition, you can prevent Google Analytics from recording data by clicking on the following link to install a corresponding opt-out cookie: Disable Google Analytics.

For more information about Google’s privacy policy, click here.

6. Your rights as a data subject

You have the right under Article 15 GDPR to obtain information about your personal data processed by us. In particular, you can obtain information about the purposes of processing, the categories of personal data concerned, the categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data, the existence of the right to lodge a complaint, information about the source of personal data not collected from you, and the existence of automated decision-making, including profiling and meaningful information about the logic involved.

Regarding the personal data concerning you stored by us, you have the right under Article 16 GDPR to obtain the rectification of inaccurate personal data without undue delay as well as to have incomplete personal data completed.

You have the right under Article 17 GDPR to obtain the erasure of your personal data, provided their processing is not required to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

You have the right under Article 18 GDPR to request the restriction of the processing of your personal data if a) you contest their accuracy, b) processing is unlawful and you oppose the erasure of the personal data, c) or we no longer need the personal data for the purposes of processing but you require them for the establishment, exercise or defence of legal claims, d) or you have objected to processing under Article 21 GDPR.

You have the right under Article 20 GDPR to receive your personal data that you have made available to us in a structured, commonly used and machine-readable format, or to have these data transmitted to another controller.

You have the right under Article 7(3) GDPR to withdraw your consent previously granted to us. We will then no longer be allowed to continue the data processing you previously agreed to.

You have the right under Article 77 GDPR to lodge a complaint with a supervisory authority. To do so, you can normally contact the supervisory authority in your habitual residence, your place of work, or our place of business.

7. Right to object

If we have processed your personal data on the basis of legitimate interests based on point (f) of Article 6(1) GDPR, you have the right pursuant to Article 21 GDPR to object to the processing of your personal data on grounds relating to your particular situation or because you object to direct marketing. You have a general right to object to processing for direct marketing purposes, in which case your personal data will no longer be processed for such purposes (without the need for you to disclose a particular situation). To exercise your right to withdraw your consent or object, simply send an email to datenschutz@westend-communication.de.

The provision of your personal data is neither legally nor contractually required, and you are under no other obligation to provide your personal data. However, note that we won’t be able to contact you if you don’t provide us with your personal data.

8. Data security

When you visit our website, we use the widespread SSL protocol (Secure Sockets Layer) in conjunction with the highest level of encryption supported by your browser – usually 256-bit encryption. If your browser doesn’t support 256-bit encryption, we revert instead to 128-bit v3 technology. If the padlock icon in the status bar of your browser is in the locked position, the respective webpage is encrypted.

We also take appropriate technical and organizational measures to protect your data against unauthorized or unlawful processing and against accidental loss, destruction or damage. Our security precautions are continuously optimized in line with technological progress.

9. Validity of this privacy policy; amendments

This privacy policy is currently valid and was last updated in August 2019.

This privacy policy may be updated in response to the continued development of our website and services as well as changes to legislation or regulations. The version of our privacy policy currently in force can always be viewed on our website under ‘Privacy policy’ and printed.