We place high value on the protection of your personal data (hereinafter briefly "data"). Hereinafter, we therefore want to inform you in detail about which data we collect and subsequently process.
I. Name and contact data of the responsible person, data protection officer:
The responsible person within the meaning of the privacy provisions for the processing of personal data is:
regenold GmbH
Zöllinplatz 4
D-79410 Badenweiler
Managing Directors:
Marcel Wöllbrink, Dr. Maximilian Regenold, Dr. Katrin Wiemann
Contact data protection officer:
regenold GmbH
Zöllinplatz 4
Datenschutzbeauftragte / Data Protection Officer
D-79410 Badenweiler
II. Purpose of the processing of personal data, legal basis and storage duration:
Hereinafter, we inform you about the data processing taking place on our website (a), the purposes (b), legal basis (c) and the respective storage duration and, if applicable, concrete possibilities of objection and removal (d).
1. Logfiles
a)
When accessing our website, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily saved in a so-called logfile. Within this process, the following information is collected without your input and stored until its automatic deletion:
b)
The mentioned data are processed by us for the following purposes:
c)
The legal basis for this data processing is Art. 6 par. 1 p. 1 b and f GDPR. Our justified interest results from the above-mentioned data processing purposes. In any case, we do not use the collected data to draw any conclusions about your person.
d)
The data in the logfiles will be deleted at the latest after one year.
2. Social Media Plug-ins
a)
Currently we use the social media plug-in LinkedIn. In doing this, we use the so-called two-click solution. This means that first, in principle, no personal data are forwarded to the provider of the plug-in when you visit our website. However, we give you the option to directly communicate with the provider of the plug-in via the button. If you click on the marked button and thus activate it, the plug-in provider receives the information that you have accessed the respective website of our online offering. Besides, the data mentioned in n° III 1 of this declaration are transmitted. The data are then forwarded irrespective of whether you have an account with the plug-in provider and if you are logged in there. If you are logged in with the plug-in provider, your data collected with us will be directly attributed to the account existing with the plug-in provider. If you confirm the activated button and e.g. link the page, the plug-in provider also saves this information in your user account and communicates it publicly to your contacts. So by activating the plug-in, personal data are transmitted by you to the plug-in provider and saved there. LinkedIn processes both inside and outside of the United States, in a country without an adequate level of data protection.
b)
On our website, we use the above-mentioned social plug-in to increase the awareness of our company.
The plug-in provider saves the data collected about you as user profiles and uses them for advertising, market research and/or adaption of his website to the needs. Such evaluation occurs in particular (also for users not logged in) to present advertising adapted to the needs and to inform other users of the social network about your activities on our website.
c)
The legal basis for the use of the plug-in is Art. 6 par. 1 p. 1 f GDPR. The underlying advertising purpose is to be considered a justified interest within the meaning of the GDPR.
We recommend you to regularly log out after using the social network, but especially before activating the respective button, because this allows you to avoid an attribution to your profile with the plug-in provider.
In addition, you have a right of objection to the creation of these user profiles for the exercise of which you must contact the plug-in provider.
We have no influence on the collected data and the data processing procedures with the provider of the plug-in. The responsibility lies with him alone. You can infer additional information on the data processing there, in particular on the legal basis and storage duration, from the privacy statements of the provider. There you can also receive additional information on your respective rights and possible settings for the protection of your privacy. You can find further information regarding the processing of your data by LinkedIn and your rights towards LinkedIn at the homepage of the provider.
3. Contact form
a)
On our website, there is a contact form that can be used for taking contact electronically. If you use this option, the data entered in the input mask are transmitted to us and saved. The mandatory details that must be completed to take contact electronically are marked by (*). In the contact form, this is your email address. If you provide us any data in addition to that (name, etc.), this occurs voluntarily.
b)
The data are processed to allow for making contact, to process your request, to avoid a misuse of the contact form and to guarantee the security of our IT systems.
c)
The above-mentioned purpose represents the justified interest in the processing of the data. If the email contact intends to prepare the conclusion of a contract, the additional legal basis for the processing is Art. 6 par. 1 p. 1 b GDPR.
The legal basis for the processing of the data voluntarily provided to us by you is Art. 6 par. 1 p. 1 a GDPR.
d)
see Section “Deletion” below.
4. Google-Maps
a)
On our website, we use the offer of Google Maps. Here we also use the above-mentioned two-click solution (II. n° 4). The above-mentioned data will only be transferred when you activate the service. We have no influence on this data transmission. This occurs irrespective of whether Google provides a user account on which you are logged in or if there is no user account. If you are logged in at Google, your data are directly attributed to your account.
b)
We use Google Maps to show you interactive maps directly in the website and to allow you to comfortably use the map function. Google saves your data as user profiles and uses them for advertising, market research and/or adaption of its website to the needs. Such an evaluation occurs in particular (even for users not logged in) to present advertising adapted to the needs and to inform other users of the social network about your activities on our website.
c)
The legal basis for the use of the plug-in is Art. 6 par. 1 p. 1 f GDPR. The underlying purpose of an interactive description of the itinerary to our company is to be considered the justified interest within the meaning of the GDPR. We recommend you to regularly log out after using your Google account because this allows you to avoid an attribution to your profile with the plug-in provider Google.
You have a right to objection to the creation of these user profiles for the exercise of which you must contact Google. We have no influence on the collected data and data processing procedures with Google Inc. The responsibility lies with it alone.
You can obtain additional information on the data processing, in particular on the legal basis and storage duration, in the privacy statements of the provider at its homepage. Google processes your data in the United States, in a country without an adequate level of data protection.
5. Online appointment booking via our website
Use of the online appointment booking tool
On our website, you have the option of making appointments with specific contact persons. For this purpose, we use a tool from the provider Zeeg GmbH, Friedrichstraße 114 a, 10117 Berlin, Germany (hereinafter referred to as "Zeeg"). The Terms of Service of Zeeg apply to the use of the tool (https://zeeg.me/en/legal/terms).
Extent and purpose of processing
The information requested by Zeeg, such as your e-mail address, is processed in order to carry out and confirm the appointment booking. You also have the option of providing further information.
Legal bases of the processing
Where appointments are booked in the context of the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract: Art. 6 para. 1 lit. b GDPR.
In all other cases, it is in our overriding legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR to offer those interested in our services a simple, uncomplicated and low-threshold way to make appointments with specific contact persons from us.
Commissioned data processing
We have concluded a data processing agreement with Zeeg in accordance with Art. 28 GDPR. Further information from us on cooperation with processors can be found below in Section III. Cooperation with contract processors and third parties.
Duration of processing and further information
Information on the duration of processing can be found below in section IV. Deletion. Further information on how Zeeg processes your data can be found in the Privacy Notice (https://zeeg.me/en/legal/privacy) and in the GDPR Compliance Statement of Zeeg.(https://zeeg.me/en/legal/gdpr)
III. Cooperation with contract processors and third parties:
For the processing of your data, we partially use external service providers (contract processors). They have been carefully selected and commissioned by us, are bound to instructions and regularly controlled. They are external service providers who support us technically (web designers, programmers). This is done on the basis of processing contracts according to Art. 28 GDPR.
Apart from that, we only forward your data to any third parties if:
Service providers are only commissioned in a third country if the special preconditions according to Art. 44 et seq. GDPR are fulfilled.
IV. Deletion:
The data are deleted as soon they are no longer required for the achievement of the purpose of their collection or after expiry of any statutory retention period. As for the data from the input mask of the contact form, this is the case when the respective conversation with you is finished. The conversation is finished when the circumstances indicate that the concerned issue is finally clarified.
Besides, you can revoke your consent to the processing of the data voluntarily provided any time. For this, please simply contact us using the contact information provided in n° I. In such case, the conversation cannot be continued.
V. Rights of the concerned persons:
You have the right:
VI. Right of refusal:
As far as your personal data are processed on the basis of justified interests according to Art. 6 par. 1 p. 1 f GDPR, you are entitled to object to the processing of your personal data according to Art. 21 GDPR, as far as there are reasons for that resulting from your special situation; this also applies to a profiling based on these provisions. We will then no longer process the personal data concerning you, unless we can prove compulsory reasons for the processing worthy of protection which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend any legal rights.
Of course, you can object to the processing of your personal data for purposes of advertising and data analysis anytime. This also applies to the profiling as far as it is connected to such direct advertising.
VII. Right of revocation of the consent according to privacy law:
According to Art. 7 par. 3 GDPR, you have the right to revoke your given consent vis-à-vis us anytime. The consequence of this is that we may not continue the data processing which was based on this consent any longer for the future. The lawfulness of the processing conducted due to the consent until its revocation is not affected thereby.
VIII. Up-to-dateness and changes of this privacy statement:
This privacy statement corresponds to the status of July 2022. Due to the further development of our website and offers on it or due to changed legal or official provisions, it can become necessary to change this privacy statement.