Privacy Policy

We hereby inform you, in accordance with the legal requirements of data protection law (in particular pursuant to the BDSG n.F. and the European General Data Protection Regulation ‚GDPR‘), about the type, scope, and purpose of the processing of personal data by our company. This Privacy Policy also applies to our websites and social media profiles. Regarding the definition of terms such as „personal data“ or „processing,“ we refer to Art. 4 GDPR.

Name and Contact Details of the Responsible Party

Our Responsible Party (hereinafter referred to as „Controller“) within the meaning of Art. 4 No. 7 GDPR is:

Enrico Schmidt
Puschkinstraße 42
04838 Eilenburg
Managing Director: Enrico Schmidt
Email Address: enricoschmidt1@gmx.de

Types of Data, Purposes of Processing, and Categories of Data Subjects

Below, we inform you about the type, scope, and purpose of the collection, processing, and use of personal data.

1. Types of data we process:

Contact details (phone number, email, fax, etc.)

2. Purposes of processing as per Art. 13 para. 1 c) GDPR:

To optimize the website technically and economically, and to facilitate easy access to the website.

3. Categories of data subjects as per Art. 13 para. 1 e) GDPR:

Visitors/users of the website.

The affected persons are collectively referred to as „users.“

Legal Basis for the Processing of Personal Data

Below, we inform you about the legal basis for processing personal data:

If we have obtained your consent for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a) GDPR is the legal basis.
If the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures initiated at your request, Art. 6 para. 1 sentence 1 lit. b) GDPR is the legal basis.
If the processing is necessary for compliance with a legal obligation to which we are subject (e.g., statutory retention obligations), Art. 6 para. 1 sentence 1 lit. c) GDPR is the legal basis.
If the processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6 para. 1 sentence 1 lit. d) GDPR is the legal basis.
If the processing is necessary for the purposes of legitimate interests pursued by us or by a third party, and your interests or fundamental rights and freedoms do not override these interests, Art. 6 para. 1 sentence 1 lit. f) GDPR is the legal basis.

Disclosure of Personal Data to Third Parties and Processors

As a general rule, we do not transfer your data to third parties without your consent. Should this occur, the transfer will be based on the aforementioned legal grounds, e.g., when transferring data to online payment providers to fulfill a contract or due to a court order, or because of a legal obligation to disclose data for purposes of criminal prosecution, hazard prevention, or enforcement of intellectual property rights.
We also use processors (external service providers, e.g., for hosting our websites and databases) to process your data. When data is shared with processors as part of an order processing agreement, this is always done in accordance with Art. 28 GDPR. We carefully select our processors, monitor them regularly, and have been granted the right to issue instructions regarding the data. Furthermore, processors must take appropriate technical and organizational measures and comply with data protection regulations in accordance with BDSG n.F. and GDPR.

Data Transfer to Third Countries

With the adoption of the European General Data Protection Regulation (GDPR), a uniform basis for data protection has been established within Europe. Therefore, your data is primarily processed by companies for which the GDPR applies. Should processing take place by third-party services outside the European Union or the European Economic Area, these must comply with the special requirements of Art. 44 ff. GDPR. This means the processing will occur based on specific guarantees, such as the officially recognized determination of an EU-equivalent data protection level by the EU Commission or compliance with officially recognized special contractual obligations, the so-called „Standard Contractual Clauses.“
If, due to the invalidity of the so-called „Privacy Shield,“ we obtain your explicit consent for data transfer to the USA pursuant to Art. 49 para. 1 sentence 1 lit. a) GDPR, we hereby point out the risk of covert access by US authorities and the use of data for surveillance purposes, possibly without legal remedies for EU citizens.

Deletion of Data and Retention Period

Unless explicitly stated in this Privacy Policy, your personal data will be deleted or blocked as soon as the consent given for processing is revoked, or the purpose for storing it ceases to exist, or the data is no longer required for that purpose, unless its further retention is necessary for evidence purposes or if statutory retention obligations oppose this. These include, for example, commercial retention obligations for business correspondence under § 257 para. 1 HGB (6 years) and tax retention obligations under § 147 para. 1 AO for documents (10 years). When the prescribed retention period expires, the data will be blocked or deleted unless storage is still required for a contract conclusion or performance.

Existence of Automated Decision-Making

We do not use automated decision-making or profiling.

Provision of Our Website and Creation of Log Files

If you use our website for informational purposes only (i.e., without registering or otherwise transmitting information), we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data:
• IP address;
• Internet service provider of the user;
• Date and time of access;
• Browser type;
• Language and browser version;
• Content of the request;
• Time zone;
• Access status/HTTP status code;
• Data volume;
• Websites from which the request originates;
• Operating system.
This data is not stored together with other personal data of yours.
This data is used to deliver our website to you in a user-friendly, functional, and secure manner with features and content, as well as to optimize and statistically evaluate it.
The legal basis for this is our legitimate interest in data processing according to Art. 6 para. 1 sentence 1 lit. f) GDPR for the aforementioned purposes.
For security reasons, we store this data in server log files for a storage period of 30 days. After this period, the data is automatically deleted unless we require it as evidence in case of attacks on the server infrastructure or other legal violations.

Cookies

We use cookies when you visit our website. Cookies are small text files that your internet browser stores on your computer. When you revisit our website, these cookies provide information to automatically recognize you. These cookies also include so-called „user IDs,“ where user information is stored via pseudonymized profiles. We inform you about the use of cookies for the aforementioned purposes and how you can object to their use or prevent their storage („opt-out“) when you visit our website.

The following types of cookies are distinguished:

• Necessary, essential cookies: Essential cookies are required for the operation of the website to enable certain functions, such as logins, shopping carts, or user inputs, e.g., regarding the language of the website.

• Session cookies: Session cookies are used to recognize multiple uses of a service by the same user (e.g., when you log in to determine your login status). When you revisit our site, these cookies provide information to automatically recognize you. The information obtained is used to optimize our offers and provide you with easier access to our site. Session cookies are deleted when you close your browser or log out.

• Persistent cookies: These cookies remain stored even after the browser is closed. They are used to save logins, measure reach, and for marketing purposes. These are automatically deleted after a specified duration, which may vary depending on the cookie. You can delete cookies at any time via your browser’s security settings.

• Third-party cookies (especially from advertisers): According to your preferences, you can configure your browser settings, e.g., refuse third-party cookies or all cookies. However, please note that you may not be able to use all the functions of this website fully. For more information on these cookies, please refer to the respective privacy policies of the third-party providers.
Data categories: User data, cookies, user ID (including visited pages, device information, access times, and IP addresses).
Purposes of processing: The information obtained is used to technically and economically optimize our web offerings and provide you with easier and safer access to our website.
Legal basis: If we process your personal data using cookies based on your consent („opt-in“), Art. 6 para. 1 sentence 1 lit. a) GDPR is the legal basis. Otherwise, we have a legitimate interest in the effective functionality, improvement, and economic operation of the website, making Art. 6 para. 1 sentence 1 lit. f) GDPR the legal basis. Furthermore, Art. 6 para. 1 sentence 1 lit. b) GDPR serves as the legal basis when cookies are set for contract initiation, e.g., for orders.
Storage duration/deletion: The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collection for providing the website, this is the case when the respective session ends.

Cookies are otherwise stored on your computer and transmitted to our site from there. As a user, you have full control over the use of cookies. By changing your internet browser settings, you can disable or restrict the transmission of cookies. Stored cookies can be deleted at any time, either manually or automatically. If cookies are disabled for our website, some functions of the website may not be fully usable.

Existence of Automated Decision-Making

We do not use automated decision-making or profiling.

Provision of Our Website and Creation of Log Files

If you use our website for informational purposes only (i.e., without registering or otherwise transmitting information), we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data:
• IP address;
• Internet service provider of the user;
• Date and time of access;
• Browser type;
• Language and browser version;
• Content of the request;
• Time zone;
• Access status/HTTP status code;
• Data volume;
• Websites from which the request originates;
• Operating system.
This data is not stored together with other personal data of yours.
This data is used to deliver our website to you in a user-friendly, functional, and secure manner with features and content, as well as to optimize and statistically evaluate it.
The legal basis for this is our legitimate interest in data processing according to Art. 6 para. 1 sentence 1 lit. f) GDPR for the aforementioned purposes.
For security reasons, we store this data in server log files for a storage period of 30 days. After this period, the data is automatically deleted unless we require it as evidence in case of attacks on the server infrastructure or other legal violations.

Cookies

We use cookies when you visit our website. Cookies are small text files that your internet browser stores on your computer. When you revisit our website, these cookies provide information to automatically recognize you. These cookies also include so-called „user IDs,“ where user information is stored via pseudonymized profiles. We inform you about the use of cookies for the aforementioned purposes and how you can object to their use or prevent their storage („opt-out“) when you visit our website.

The following types of cookies are distinguished:

• Necessary, essential cookies: Essential cookies are required for the operation of the website to enable certain functions, such as logins, shopping carts, or user inputs, e.g., regarding the language of the website.

• Session cookies: Session cookies are used to recognize multiple uses of a service by the same user (e.g., when you log in to determine your login status). When you revisit our site, these cookies provide information to automatically recognize you. The information obtained is used to optimize our offers and provide you with easier access to our site. Session cookies are deleted when you close your browser or log out.

• Persistent cookies: These cookies remain stored even after the browser is closed. They are used to save logins, measure reach, and for marketing purposes. These are automatically deleted after a specified duration, which may vary depending on the cookie. You can delete cookies at any time via your browser’s security settings.

• Third-party cookies (especially from advertisers): According to your preferences, you can configure your browser settings, e.g., refuse third-party cookies or all cookies. However, please note that you may not be able to use all the functions of this website fully. For more information on these cookies, please refer to the respective privacy policies of the third-party providers.
Data categories: User data, cookies, user ID (including visited pages, device information, access times, and IP addresses).
Purposes of processing: The information obtained is used to technically and economically optimize our web offerings and provide you with easier and safer access to our website.
Legal basis: If we process your personal data using cookies based on your consent („opt-in“), Art. 6 para. 1 sentence 1 lit. a) GDPR is the legal basis. Otherwise, we have a legitimate interest in the effective functionality, improvement, and economic operation of the website, making Art. 6 para. 1 sentence 1 lit. f) GDPR the legal basis. Furthermore, Art. 6 para. 1 sentence 1 lit. b) GDPR serves as the legal basis when cookies are set for contract initiation, e.g., for orders.
Storage duration/deletion: The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collection for providing the website, this is the case when the respective session ends.

Cookies are otherwise stored on your computer and transmitted to our site from there. As a user, you have full control over the use of cookies. By changing your internet browser settings, you can disable or restrict the transmission of cookies. Stored cookies can be deleted at any time, either manually or automatically. If cookies are disabled for our website, some functions of the website may not be fully usable.

We have integrated plugins from the social network Twitter.com (Twitter Inc., 1355 Market St., Suite 900, San Francisco, California 94103, USA) on our website as part of the so-called „two-click solution“ by Shariff. You can recognize these plugins by the Twitter logo with a white bird on a blue background. An overview of Twitter buttons and tweets can be found here: https://developer.twitter.com/en/docs/twitter-for-websites/overview.
If you are logged into your Twitter account while intentionally activating the Twitter plugins, Twitter can associate the visit to our website with your Twitter profile.
If you want to exclude the data transmission to Twitter when activating the plugin, please log out of Twitter before visiting our website and delete your cookies.
The purpose and scope of data collection, as well as the further processing and use of data by Twitter, and your rights and options for protecting your privacy can be found in Twitter’s privacy policy: https://twitter.com/de/privacy. Opt-out: https://twitter.com/personalization.

Instagram

We have integrated plugins from the social network Instagram (service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on our website as part of the so-called „two-click solution“ by Shariff. You can recognize these plugins by the Instagram logo in the shape of a square camera.
If you intentionally activate the plugin, a connection will be established between your browser and the Instagram servers. Instagram will receive the information, including your IP address, that you visited our site and will transmit this information to Instagram’s servers in the USA, where it will be stored. If you are logged into your Instagram account, Instagram can associate this information with your account, and you can click the Instagram button to share and save content from our pages on your Instagram account, and possibly display it to your friends there. We have no knowledge of the exact content of the transmitted data, their use, and storage duration by Instagram.
If you log out of Instagram before visiting our website and delete your cookies, no data about the visit to our website will be associated with your Instagram profile when the plugin is activated.
You can find further information in Instagram’s privacy policy/Opt-out: https://help.instagram.com/519522125107875, Opt-out: https://help.instagram.com/contact/186020218683230.

Rights of the Data Subject

Objection or Withdrawal of Consent to the Processing of Your Data

If the processing is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a), Art. 7 GDPR, you have the right to withdraw your consent at any time. The legality of the processing carried out based on the consent until the withdrawal remains unaffected.

If we rely on the balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR for the processing of your personal data, you can object to the processing. This is the case when the processing is not necessary for the performance of a contract with you, as we will describe in the following sections. When exercising such an objection, we ask you to provide reasons as to why we should not process your personal data as we have done. In the case of your justified objection, we will examine the situation and either stop or adjust the data processing, or we will show you our compelling legitimate reasons for continuing the processing.

You can object to the processing of your personal data for advertising and data analysis purposes at any time. You can exercise your right to object free of charge. You can inform us of your objection to advertising via the following contact details:

Enrico Schmidt
Puschkinstraße 42
Eilenburg
Managing Director Enrico Schmidt
Email address: enricoschmidt1@gmx.de
Right to Information
You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to obtain information about the personal data we have stored about you in accordance with Art. 15 GDPR. This includes, in particular, information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, and the origin of your data, if not collected directly from you.
Right to Rectification
You have the right to rectify inaccurate or complete correct data in accordance with Art. 16 GDPR.
Right to Erasure
You have the right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless legal or contractual retention periods or other legal obligations or rights to further storage of the data contradict this.
Right to Restriction
You have the right to request a restriction on the processing of your personal data if one of the conditions in Art. 18 para. 1 lit. a) to d) GDPR is met:
• If you dispute the accuracy of the personal data concerning you for a period that allows the controller to verify the accuracy of the personal data;

• The processing is unlawful and you refuse the erasure of the personal data and instead request the restriction of its use;

• The controller no longer needs the personal data for processing purposes, but you need it for the establishment, exercise, or defense of legal claims, or

• If you have objected to the processing in accordance with Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate grounds of the controller override your grounds.
Right to Data Portability
You have the right to data portability according to Art. 20 GDPR, which means that you can obtain the personal data we have stored about you in a structured, commonly used, and machine-readable format, or you can request the transfer to another controller.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority. As a general rule, you can contact the supervisory authority in the member state of your residence, workplace, or the place of the alleged infringement.

Data Security

To protect all personal data transmitted to us and to ensure that data protection regulations are adhered to by us and our external service providers, we have implemented appropriate technical and organizational security measures. Therefore, all data transmitted between your browser and our server is encrypted via a secure SSL connection.

As of: 06.01.2025