PRIVACY POLICY
​
Controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
​
Sebastian Vogel
Horgener Straße 5
78658 Zimmern ob Rottweil
GERMANY
​
Contact:
Telephone: +49 156 790 251 78
Fax: –
Email: baldur@baldurgaloor.com
​
Your Rights as a Data Subject
​
Under the specified contact details of our data protection officer, you can exercise the following rights at any time:
- Information about your stored data and their processing (Art. 15 GDPR),
- Correction of incorrect personal data (Art. 16 GDPR),
- Deletion of your stored data (Art. 17 GDPR),
- Restriction of data processing, if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
- Objection to the processing of your data by us (Art. 21 GDPR), and
- Data portability, if you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).
​
If you have given us your consent, you can revoke it at any time with effect for the future.
​
You can contact a supervisory authority at any time with a complaint, e.g., the competent supervisory authority of the federal state of your residence or the authority responsible for us as the responsible authority.
​
A list of supervisory authorities (for the non-public sector) with address can be found at: [Link to Supervisory Authorities](https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html).
​
Collection of General Information when visiting our Website
​
Nature and purpose of processing:
​
When you access our website, i.e., if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, and the like.
​
They are processed in particular for the following purposes:
- Ensuring a trouble-free connection to the website,
- Ensuring smooth use of our website,
- Evaluation of system security and stability, and
- for further administrative purposes.
​
We do not use your data to draw conclusions about your person. This type of information is statistically evaluated by us if necessary to optimize our website and the technology behind it.
​
Legal basis:
​
Processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
​
Recipients:
​
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
​
Storage period:
​
The data will be deleted as soon as they are no longer required for the purpose of collection. This is generally the case for data that serves the provision of the website when the respective session has ended.
​
Provision required or necessary:
​
The provision of the aforementioned personal data is neither required by law nor by contract. However, without the IP address, the service and functionality of our website are not guaranteed. Additionally, individual services and services may not be available or may be restricted. For this reason, an objection is excluded.
​
Cookies
​
Nature and purpose of processing:
​
Like many other websites, we also use so-called "cookies." Cookies are small text files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website.
​
This allows us to receive certain data such as IP address, browser used, and operating system.
​
Cookies cannot be used to start programs or transmit viruses to a computer. Based on the information contained in cookies, we can facilitate navigation for you and enable the correct display of our web pages.
​
Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.
Of course, you can view our website without cookies. Internet browsers are regularly set to accept cookies. You can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your internet browser to find out how you can change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.
​
Storage duration and cookies used:
​
If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:
If these cookies can also affect personal data, we will inform you about it in the following sections.
You can delete individual cookies or the entire cookie inventory via your browser settings. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you will find the necessary information under the following links:
​
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
Internet Explorer: https://support.microsoft.com/de-de/help/17442
/windows-internet-explorer-delete-manage-cookies
Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
Opera: https://www.opera.com/de/help
Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE
Newsletter
Nature and Purpose of Processing:
Your data will only be used to deliver the subscribed newsletter to you by email. Providing your name is done to address you personally in the newsletter and potentially to identify you if you wish to exercise your rights as a data subject.
To receive the newsletter, providing your email address is sufficient. When subscribing to our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed via email about circumstances relevant to the service or registration (e.g., changes to the newsletter offer or technical conditions).
For effective registration, we require a valid email address. To verify that a registration is actually being made by the owner of an email address, we use the "double opt-in" procedure. For this purpose, we log the newsletter subscription, the sending of a confirmation email, and the receipt of the response requested with it. No further data is collected. The data is used exclusively for newsletter delivery and is not passed on to third parties.
​
Legal Basis:
​
Based on your explicitly given consent (Art. 6 Para. 1 lit. a GDPR), we regularly send you our newsletter or comparable information by email to the email address provided by you.
You can revoke your consent to the storage of your personal data and its use for newsletter delivery at any time with effect for the future. Each newsletter contains a corresponding link for this purpose. Additionally, you can unsubscribe directly on this website at any time or inform us of your revocation via the contact information provided at the end of this privacy policy.
​
Recipients:
Recipients of the data may be contract processors.
​
Storage Duration:
​
The data will only be processed in this context as long as the corresponding consent exists. After that, it will be deleted.
​
Provision Prescribed or Required:
​
The provision of your personal data is voluntary, solely based on your consent. Without your consent, we cannot send you our newsletter.
​
Contact Form
​
Nature and purpose of processing:
​
The data you enter will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid email address and your name. This is used to assign the request and then answer it. The specification of further data is optional.
​
Legal basis:
​
The processing of the data entered in the contact form takes place on the basis of a legitimate interest (Art. 6 Para. 1 lit. f GDPR).
By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.
​
If you contact us to request an offer, the processing of the data entered in the contact form is carried out in order to implement pre-contractual measures (Art. 6 Para. 1 lit. b GDPR).
​
Recipients:
​
Recipients of the data may be contract processors.
​
Storage period:
​
Data will be deleted at the latest 6 months after processing the request.
If there is a contractual relationship, we are subject to the statutory retention periods according to HGB and delete your data after these periods have expired.
​
Provision required or necessary:
​
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, your email address, and the reason for the request.
​
Use of Google Analytics
​
Nature and Purpose of Processing:
​
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
The purposes of data processing are to evaluate the use of the website and to compile reports on website activity. Based on the use of the website and the internet, further related services are then to be provided.
​
Legal Basis:
​
Data processing is based on the user's consent (Art. 6 para. 1 lit. a GDPR).
Recipient:
​
The recipient of the data is Google as a data processor. For this purpose, we have concluded a data processing agreement with Google.
Storage Duration:
The data will be deleted as soon as it is no longer required for our recording purposes.
Transfer to Third Countries:
Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision Prescribed or Required:
The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.
Revocation of Consent:
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: Browser Add On to deactivate Google Analytics.
In addition to or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. An opt-out cookie will be installed on your device. This will prevent Google Analytics from collecting data for this website and for this browser in the future as long as the cookie remains installed in your browser.
Profiling:
With the help of the Google Analytics tracking tool, the behavior of website visitors can be evaluated and their interests analyzed. For this purpose, we create a pseudonymous user profile.
​
Use of Script Libraries (Google Web Fonts)
Nature and Purpose of Processing:
To display our content correctly and graphically appealing across browsers, we use "Google Web Fonts" from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google") on this website to display fonts.
You can find the privacy policy of the library operator Google here: https://www.google.com/policies/privacy/
Legal Basis:
The legal basis for integrating Google Webfonts and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
Recipient:
Calling script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible - but currently unclear whether and, if so, for what purposes - that the operator may collect Google data in this case.
Storage Duration:
We do not collect any personal data through the integration of Google Webfonts.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.
Transfer to Third Countries:
Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision Prescribed or Required:
The provision of personal data is neither legally nor contractually required. However, the correct display of content using standard fonts may not be possible.
Revocation of Consent:
To display the content, the programming language JavaScript is regularly used. You can therefore object to data processing by deactivating the execution of JavaScript in your browser or by installing a JavaScript blocker. Please note that this may result in functional restrictions on the website.
Use of Google Maps
Nature and Purpose of Processing:
We use Google Maps on this website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.
You can find more information about Google's data processing in the Google privacy policy. There you can also change your personal data protection settings in the privacy center.
Detailed instructions on how to manage your data in connection with Google products can be found here.
Legal Basis:
The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
Recipient:
By visiting the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account.
If you do not want the assignment in your profile at Google, you must log out of Google before activating the button. Google stores your data as usage profiles and uses it for purposes of advertising, market research, and/or demand-oriented design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.
Storage Duration:
We do not collect any personal data through the integration of Google Maps.
Transfer to Third Countries:
Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Revocation of Consent:
If you do not want Google to collect, process, or use data about you through our website, you can deactivate JavaScript in your browser settings. However, in this case, you may not be able to use our website or only to a limited extent.
Provision Prescribed or Required:
The provision of personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.
Embedded YouTube Videos
Nature and Purpose of Processing:
We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube"). When you visit a page with the YouTube plugin, a connection to YouTube's servers is established. This informs YouTube which pages you visit. If you are logged into your YouTube account, YouTube can associate your browsing behavior with you personally. You can prevent this by logging out of your YouTube account beforehand.
When a YouTube video is started, the provider uses cookies to collect information about user behavior.
You can find further information on the purpose and scope of data collection and its processing by YouTube in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework
Legal Basis:
The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
Recipient:
Calling up YouTube automatically triggers a connection to Google.
​
Storage Duration and Revocation of Consent:
​
If you have deactivated the storage of cookies for the Google Ad program, you will not have to expect such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in your browser.
Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy/
Transfer to Third Countries:
Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision Prescribed or Required:
The provision of personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.
Google AdWords
Nature and Purpose of Processing:
Our website uses Google Conversion Tracking. The service provider of Google AdWords is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our website via a Google ad, Google AdWords will set a cookie on your computer. The cookie for conversion tracking is set when a user clicks on a Google ad.
​
If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked across AdWords customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users.
Legal Basis:
The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
Recipient:
Every time you visit our website, personal data, including your IP address, is transmitted to Google in the USA. This personal data is stored by Google. Google may pass on this personal data collected through the technical process to third parties.
Our company does not contain any information from Google that could identify the data subject.
Storage Duration:
These cookies lose their validity after 30 days and are not used for personal identification.
Transfer to Third Countries:
Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Revocation of Consent:
If you do not wish to participate in tracking, you can refuse to set a cookie - for example, by setting your browser to generally disable the automatic setting of cookies or by blocking cookies from the domain "googleleadservices.com".
Please note that you must not delete the opt-out cookies as long as you do not wish to record measurement data. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.
Provision Prescribed or Required:
The provision of personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.
Use of Google Remarketing
Nature and Purpose of Processing:
This website uses the remarketing function of Google Inc. The service provider for Google Remarketing is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google").
The function is used to present website visitors with interest-based advertisements within the Google advertising network. A so-called "cookie" is stored in the visitor's browser, which enables the visitor to be recognized when he or she visits websites that belong to the Google advertising network. On these pages, visitors may be presented with advertisements that relate to content the visitor previously accessed on websites that use Google's remarketing function.
Legal Basis:
The legal basis for the integration of Google Remarketing and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
Recipient:
Every time you visit our website, personal data, including your IP address, is transmitted to Google in the USA. This personal data is stored by Google. Google may pass on this personal data collected through the technical process to third parties.
Our company does not contain any information from Google that could identify the data subject.
Revocation of Consent:
According to its own statements, Google does not collect any personal data in this process. However, if you still do not wish to use the Remarketing function from Google, you can generally deactivate it by adjusting the corresponding settings at https://support.google.com/adwordspolicy/answer/143465. Alternatively, you can disable the use of cookies for interest-based advertising via the Network Advertising Initiative opt-out page by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.
Provision Prescribed or Required:
The provision of personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.
SSL Encryption
​
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.
​
Change of our Privacy Policy
​
We reserve the right to adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g., when introducing new services. The new data protection declaration will then apply to your next visit.
​
Questions to the Data Protection Officer
​
If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly:
Sebastian Vogel
Horgener Straße 5
78658 Zimmern ob Rottweil
GERMANY
Telephone: +49 156 790 251 78
Email: baldur@baldurgaloor.com
​