Privacy Policy
1. Introduction
Thank you for your interest in our company. Data protection and privacy are of a particular high priority for the management of the Declarium GmbH. The Declarium website can generally be used without providing personal data. If someone is interested in our services or wishes to make use of special services via our website, it may be necessary to process personal data.
2. Relevant contact details for privacy policy and the content
Contact details of the controller responsible for processing data
Declarium GmbH
Management
Cosimastr. 121
81925 Munich
Germany
Telefon: +49 175 413 5697
E-Mail: info@declarium.de
Website: www.declarium.de
3. Collection of general data and information
The website of the Declarium GmbH collects a series of general data and information when a data subject or automated system calls up the website. This general data and information is stored in the server log files. The (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so- called referrer), (4) the sub-websites which are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) a Internet Protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information used for security purposes in the event of attacks on our information technology systems. When using these general data and information, the Declarium GmbH does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimize the content of our website as well as its advertisement, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, the Declarium GmbH analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.
4. Purposes of data processing
The personal data collected from you will be used for the following purposes:
- To provide our services and functions of our website.
- To fulfill our contractual obligations and services.
- To process your requests and for communication with you.
- To improve our website and services by analyzing usage data.
- To ensure the security and stability of our IT systems.
- To carry out marketing measures, provided you have given your consent for this.
5. Legal bases of the processing
Your personal data is processed on the following legal bases:
- Art. 6 para. 1 lit. a GDPR: Consent of the data subject.
- Art. 6 para. 1 lit. b GDPR: Performance of a contract or in order to take steps prior to entering into a contract.
- Art. 6 para. 1 lit. c GDPR: Fulfillment of a legal obligation.
- Art. 6 para. 1 lit. f GDPR: Safeguarding the legitimate interests of our company, e.g. to improve our services and the security of our IT systems.
6. Disclosure of data to third parties
Your personal data will only be passed on to third parties if this is necessary to fulfill our contractual obligations, if you have expressly consented or if there is a legal obligation. The recipients of your data may include
- Authorities and state institutions, insofar as we are legally obliged to do so.
- Partner companies and other third parties if this is necessary to fulfill our contractual obligations or if there are legitimate interests.
- Service providers that we need to provide our services (e.g. hosting providers, email service providers)
We ensure that all external service providers who process data on our behalf are contractually obliged to comply with the applicable data protection regulations. Your personal data will only be transferred to third countries if an appropriate level of data protection is guaranteed or you have expressly consented to this.
7. Contact data
The website of the Declarium GmbH contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the data controller by e-mail or via a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the controller are stored for the purposes of processing or contacting the data subject. This personal data is not passed on to third parties.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested. The same applies to inquiries by email or telephone.
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Statutory provisions – in particular retention periods – remain unaffected.
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses a SSL or TLS encryption.
8. Cookies
Our website uses cookies and similar technologies to improve the use of our website and to enable certain functions (e.g. for marketing purposes). Cookies are small text files that are stored on your end device and contain information about your use of our website. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit.
Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser. You can control and object to the use of cookies at any time via your browser settings. Please note that deactivating cookies may impair the functionality of our website.
9. Analysis tools and advertising
The use of the listed analysis tools is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, length of visit, operating systems used and origin of the user. This data may be summarized by Google in a profile that is assigned to the respective user or their end device.
We can also use Google Analytics to record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modeling approaches to supplement the collected data records and uses machine learning technologies for data analysis.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/controllerterms/mccs
IP anonymization:
We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser Plugin:
You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Order processing:
We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Storage duration:
Data stored by Google at user and event level that is linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 2 months. For details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=de
You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Google Web Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google’s servers. This gives Google knowledge that this website has been accessed via your IP address. The use of Google WebFonts is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
If your browser does not support web fonts, a standard font will be used by your computer.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.
WordPress statistics
This website uses “WordPress Statistics” to statistically analyze visitor access. The provider is Automattic Inc, 60 29th Street #343, San Francisco, CA 94110-4929, USA.
WordPress Statistics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting).
WordPress Statistics collects log files (referrer, IP address, browser, etc.), the origin of website visitors (country, city) and what actions they have taken on the site (e.g. clicks, views, downloads) for analysis purposes. The information collected in this way about the use of this website is stored on servers in the USA. Your IP address is anonymized after processing and before storage.
This analysis tool is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the anonymized analysis of user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
10. Newsletter
If you register for our newsletter, we will use your email address to send you regular information about our products, services and current offers. To receive the newsletter, it is sufficient to provide a valid e-mail address. When registering for the newsletter, we also store the IP address of the computer system used by the data subject at the time of registration as well as the date and time of registration. This data is required in order to be able to trace the misuse of your e- mail address at a later date.
Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registering, you will receive an email asking you to confirm your registration. This confirmation is necessary to ensure that no one can register with other people’s email addresses.
You can revoke your consent to the storage of your e-mail address and its use for sending the newsletter at any time. The revocation can be made via a link in the newsletter itself or by sending a message to the above-mentioned contact options. After revocation, your data will be deleted immediately.
11. Data retention
We only store your personal data for as long as is necessary to fulfill the purposes for which it was collected or as required by law. As soon as the data is no longer required for the stated purposes, it is deleted or anonymized. The following retention periods apply in detail:
Contract data: These are stored for the duration of the contractual relationship and in accordance with the statutory retention periods.
Communication data: Data from inquiries will be deleted after the inquiry has been processed, provided there are no statutory retention obligations.
Marketing data: This will be stored until you withdraw your consent.
12. Rights of the data subjects
You have the following rights regarding your personal data:
- Right of information: You have the right to receive information about the personal data stored about you.
- Right of rectification: You have the right to request the rectification of inaccurate or incomplete data.
- Right of erasure: You have the right to request the erasure of your personal data, provided that there are no statutory retention obligations to the contrary.
- Right of restriction of processing: You have the right to request the restriction of the processing of your data.
- Right of objection: You have the right to object to the processing of your data.
- Right of data portability: You have the right to request the transfer of your data to another controller.
You can contact us at any time to exercise these rights. You will find the contact details at the top of this privacy policy.
13. Data security
We use technical and organizational security measures to protect your personal data from loss, misuse and unauthorized access. These include measures such as encryption, firewalls and secure servers. Our security measures are regularly reviewed and adapted to technological progress.
14. Changes to the privacy policy
We reserve the right to amend this privacy policy at any time in order to adapt it to changed legal situations or in the event of changes to the service and data processing. The current version of the privacy policy is always available on our website. We will inform you of any significant changes by means of a notice on our website.
15. Contact information for data protection inquiries
If you have any questions about data protection or would like to exercise your rights regarding your personal data, you can contact us at any time using the following contact details:
Declarium GmbH
Cosimastr. 121
81925 München
Deutschland
Telefon: +49 (0)123 456789
E-Mail: datenschutz@declarium.de
16. Beschwerderecht bei der Aufsichtsbehörde
Sollten Sie der Ansicht sein, dass die Verarbeitung Ihrer personenbezogenen Daten gegen die Datenschutz-Grundverordnung (DSGVO) verstößt, haben Sie das Recht, bei einer Aufsichtsbehörde Beschwerde einzulegen.