We thank you for your interest in our online offering and are glad you have decided to visit. In the following statement, we would like to inform you about the nature, scope and purpose of collecting, using and processing personal data in relation to the use of our website and, at the same time, inform you about your rights.
It is possible to visit and use our website without providing personal data. Personal data include all data which can be personally linked to you, e.g. name, address, e-mail address, user behaviour.
However, if certain services (such as registration or transferring other information) on our website are used, personal data will be collected and processed strictly in accordance with the applicable General Data Protection Regulation (GDPR).
To protect your data, our website always uses an up-to-date encryption method (SSL or TLS).
(1) The data controller responsible for processing data via this website within the meaning of all data protection regulations (particularly within the meaning of the GDPR, Article 4(7)) is:
Mr Niko Chainopoulos
Friedberger Landstraße 392
The party responsible for the dissemination of personal data is a natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
(2) If you contact us via e-mail or a contact form, we will store personal data disclosed by you (your e-mail address and, if given, your name and your phone number) in accordance with point (f) and, if applicable, point (b) of Article 6 (1)(1) of the GDPR on the basis of our legitimate interest of being able to respond to your enquiries. We delete any data disclosed in this way after we no longer need to store them (once the enquiry has been dealt with) or restrict the processing of these data if statutory retention requirements apply.
(1) When using our website purely for informative purposes, i.e. if you do not register or communicate other information to us, we will only collect the personal data that your browser sends to our server and are technically necessary to run the website and ensure its stability, functionality and security. The data are collected in accordance with point (f) of Article 6 (1)(1) of the GDPR on the basis of our legitimate interest and comprise the following data in particular: IP address (possibly in an anonymised form), date and time when our website was accessed, content of the request (specific page), access status/http status code, amount of data transferred each time, the browser used and the operating system used.
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files which are assigned to and stored on your hard drive in association with the browser you are using and through which we receive certain information. Cookies cannot run programs or transfer viruses to your computer. They are used to make Internet services more user-friendly and effective overall or to simplify using our website (e.g. displaying the contents of the shopping cart the next time you visit our website).
Our website uses transient and persistent cookies in particular. Transient cookies are automatically deleted when you close the browser. In particular, these include session cookies. They store a so-called session ID, with which various requests from your browser can be assigned to the common session. This allows your computer to be recognised if you visit our website again. Session cookies are deleted when you log out or close the browser. Persistent cookies are automatically deleted after a
specified period. This period may differ depending on the particular cookie. You can delete these cookies at any time in the security settings.
If the use of these cookies results in the processing of personal data, the legal basis for this is point (b) of Article 6 (1) of the GDPR (performance of the contract), point (a) of Article 6 (1) (consent given) or point (f) of Article 6 (1) of the GDPR (safeguarding our legitimate interest).
(3) You can configure the security settings of your browser in accordance with your preferences with respect to how cookies are stored and, for example, whether third-party cookies or all cookies should be rejected. To do this, please access the help menu of the browser you are using. If you reject cookies in full or in part, you may not be able to use all the features of our website.
(1) In addition to the purely informative use of our website, we offer various services that you can use if you are interested. To access these additional features and offerings, you must provide additional personal data, which we will use to provide the respective service and to which the aforementioned data processing principles apply.
(2) In some cases, we use external service providers to process your data. They have been carefully selected and commissioned by us, and they are bound by our instructions and checked regularly.
(4) If our service providers or partners are located in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer
Personal data will be stored for the duration of the respective statutory retention period (calculated, in particular, on the basis of commercial and tax law). If these data are not necessary for fulfilling the contract or forming a contract after the expiry of this statutory retention period or if we have no legitimate interest in continuing to store the data, they will be deleted.
(1) If you have given your consent to the processing of your personal data for one or more purposes, we will process these data on the basis of point a of Article 6(I) of the GDPR.
(2) If the processing is necessary for fulfilling a contractual relationship to which you are a party, e.g. for delivering products following an order or implementing pre-contractual measures, in particular for answering an enquiry made by you, the data are processed on the basis of point (b) of Article 6(I) of the GDPR.
(3) If processing the data is necessary in order to fulfil a legal (e.g. tax) obligation to which we are subject, we will process the data on the basis of point (c) of Article 6(I) of the GDPR.
(4) If the data are processed in order to protect your vital interests or the vital interests of another natural person, this will be based on point (d) of Article 6(I) of the GDPR.
(5) If the processing of personal data is not covered by any of the aforementioned legal bases, the data will be processed on the basis of point (f) of Article 6(I) of the GDPR. Subsequently, data will be processed to safeguard our legitimate interest or the interest of a third party, unless your interests, fundamental rights and fundamental freedoms prevail.
You have the following rights vis-à-vis our company with regard to personal data that concern you.
(1) Right of access (Article 15 of the GDPR)
You have the right to request free access and a copy of the information from us about processed personal data that concern you. In addition, the following information is available to you: (1) the purposes of processing, (2) the categories of personal data that are processed, (3) the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular recipients in third countries or international organisations, (4) – if possible – the planned duration for which the personal data will be stored, or, if this is not possible, the criteria for determining this duration, (5) the existence of a right to correction or erasure of personal data concerning you or to restriction of the processing carried out by
the data controller or a right to object to this processing (6) the right to lodge a complaint with a supervisory authority, (7) all available information about the origin of the data if we are not responsible for collecting the personal data, (8) the existence of an automated decision-making process, including profiling in accordance with Article 22(1) and (4) of the GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for you as the data subject, (9) the appropriate safeguards as per Article 46 of the GDPR associated with the transfer, if personal data are transferred to a third country or to an international organisation.
(2) Right to rectification (Article 16 of the GDPR)
You have the right to request the correction of your personal data without undue delay. In addition, you have the right to request that incomplete personal data be made complete, including by means of providing a supplementary statement.
(3) Right to erasure, Article 17 of the GDPR ("Right to be forgotten")
You have the right to the erasure of personal data without undue delay if one of the following reasons applies: (1) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, (2) you withdraw your consent on which the processing was based according to point (a) of Article 6(1) or point (a) of Article 9(2) of the GDPR and where there is no other legal ground for the processing, (3) you object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR, (4) the personal data have been unlawfully processed, (5) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject, (6) the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.
(4) Right to restriction of processing (Article 18 of the GDPR)
You have the right to demand that we restrict the processing where one of the following applies: (1) the accuracy of your personal information is contested by you for a period of time that allows us to verify the accuracy of your personal information, (2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead, (3) we no longer need the personal data for the purposes of processing, but you require them to establish, exercise or defend legal claims, or (4) you have objected to the processing pursuant to Article 21(1) of the GDPR, pending the verification whether our legitimate grounds prevail.
(5) Right to notification, Article 19 of the GDPR
We have a duty to communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 of the GDPR to each recipient whose personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed of those ecipients if you request it.
(6) Right to data portability (Article 20 of the GDPR)
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us as the controller to which the personal data have been provided, where the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) of the GDPR or on a contract pursuant to point (b) of Article 6(1) of the GDPR and the processing is carried out by automated means. Furthermore, you have the right to demand that the personal data be transmitted directly from us to another controller, where technically feasible.
(7) You also have the right to lodge a complaint with a data protection supervisory authority concerning our processing of your personal data pursuant to Article 77(3) of the GDPR.
(1) You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing your personal data based on consent before its withdrawal.
(2) Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if processing is not necessary, particularly for fulfilling a contract with you. This is described in the following descriptions of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have been doing. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue processing the data.
(3) You may of course object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your objection to the processing for advertising purposes via the following contact information:
Mr Niko Chainopoulos
Friedberger Landstraße 392
(1) We have integrated YouTube videos (Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA) into our online offering, which are stored on http://www.youtube.com and can be played directly on our website.
(3) Data processing is carried out on the basis of a legitimate interest on the part of YouTube in an Internet presence tailored to the needs of the visitor, cf. point (f) of Article 6 (1) of the GDPR.
(1) Web fonts from Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”) are integrated on this website.
(2) To display our website correctly on the browser you are using, for which we also have a legitimate interest (see point (f) of Article 6 (1) of the GDPR), the browser will load fonts (web fonts) provided by Google into the cache. For this purpose, it is necessary to establish a connection between the browser you are using and Google's servers. As a result, Google is informed that our website has been accessed via your IP address.
(3) For more information about the purpose and scope of data collection and their processing by the plug-in provider, please refer to the provider's privacy policies. There you will also find further information on your corresponding rights and settings options for protecting your privacy: https://policies.google.com/privacy. Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
(1) We use the reCAPTCHA service provided by Google (Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA). For certain interactions on our website, this service can be used to distinguish between whether an input is made by a human or automatically by a machine. When you use this service, your IP address is transmitted to Google. The legal basis for this is point (f) of Article 6 (1) of the GDPR. In this respect, we have a legitimate interest in avoiding spam and misuse associated with the use of our website.
(2) Further information on data protection at Google can be found here: https://policies.google.com/privacy and https://services.google.com/sitestats/en.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org . Google is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Kanzlei Wrase, Hamburg