Legal Notice
In the following, we inform you about the processing of personal data by us as the controller when you use our website. The processing of personal data (e.g. name, address, e-mail address or telephone number of a data subject) is carried out in accordance with the statutory provisions, in particular the requirements of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). {Play}
I. Controller responsible
The controller within the meaning of the GDPR and the national data protection laws of the member states as well as other data protection regulations is {Play}
Hand.Fest gGmbH
Colditzstraße 34-36
12099 Berlin
Deutschland
Tel.: (030) 9395 6600
E-Mail: info@handfest-berlin.de {Play}
II. Data protection officer
You can contact the data protection officer of the controller as follows:
Hand.Fest gGmbH
– For the attention of the Data Protection Officer –
Colditzstraße 34-36
12099 Berlin
E-Mail: datenschutz@handfest-berlin.de
Tel: (030) 9395 6600 {Play}
III. General information on data processing
Personal data is any information relating to an identified or identifiable natural person, such as your name or e-mail address. The term ‘processing of data’ refers in particular to the collection, storage, use and transmission of your data. {Play}
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a GDPR serves as the legal basis. {Play}
When processing personal data that is necessary for the fulfilment of a contract to which the data subject is a party, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures. {Play}
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis. {Play}
When processing personal data that is necessary for the fulfilment of a contract to which the data subject is a party, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures. {Play}
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis. {Play}
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 sentence 1 lit. d GDPR serves as the legal basis. {Play}
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for the processing. {Play}
The personal data of data subjects will be deleted or blocked as soon as the purpose of storage no longer applies. Data may be stored after the purpose of storage no longer applies if this is provided for by law. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data. {Play}
Further information on the legal basis for processing and the storage period for specific personal data can be found in the relevant subsection. {Play}
IV. Rights of the data subject
1.
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller (if applicable, if further requirements are met in the relevant regulations): {Play}
- Right of access (Art. 15 GDPR),
- Right to rectification and erasure (Art. 16, 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to cancellation if you have consented to the processing,
- Right to data portability (Art. 20 GDPR).
2.
If we process personal data as explained above in order to safeguard our legitimate interests, which are overriding in the context of a balancing of interests, you can object to this processing with effect for the future, but only if there are reasons arising from your particular situation (Art. 21 GDPR). If the processing is carried out for direct marketing purposes, you can exercise this right at any time, even if there are no grounds. Once you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing serves the establishment, exercise or defence of legal claims. This restriction does not apply if the processing is carried out for direct marketing purposes. {Play}
3.
If you are of the opinion that we are not respecting your rights to the extent owed, you have the right to complain to a data protection supervisory authority about the processing of your personal data by us. Before you do so, however, we would be pleased if you would inform us of your criticism beforehand so that we can remedy the cause of the complaint ourselves. {Play}
V. Contact us
1. Scope of the processing of personal data
If you contact us by e-mail, post, via a contact form or in any other way, the data you provide (e.g. your e-mail address, your name and telephone number if applicable) will be processed by us in order to process or respond to your enquiry. {Play}
2. Legal basis for the processing of personal data
If you provide us with your data in a pre-contractual context, for example with a request to send us an offer or with questions about our products, Art. 6 para. 1 lit. b GDPR is the legal basis. If you have given us your consent to contact you, Art. 6 para. 1 lit. a GDPR is the legal basis. In all other cases, Art. 6 para. 1 lit. f GDPR is the legal basis. {Play}
3. Purpose of data processing
The processing of personal data serves us solely to process the contact. This may also constitute the necessary legitimate interest in processing the data. {Play}
4. Duration of storage
Your data will be deleted when it can be inferred from the circumstances that your enquiry or the matter in question has been conclusively clarified. {Play}
VI. Visiting the website and log files
1. Scope of the processing of personal data
Each time our website is accessed, our system automatically collects the following data and information from the computer system of the accessing computer. {Play}
- IP address
- Date and time of access
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Websites from which the user’s system accesses our website (referrer)
- Browser, if applicable language and version of the browser software
- Operating system and its interface
The information is stored exclusively without personal reference, i.e. in anonymised form. {Play}
2. Legal basis for the processing of personal data
The legal basis for the collection of data is Art. 6 para. 1 lit. f GDPR. {Play}
3. Purpose of data processing
The temporary collection of the IP address is necessary in order to be able to display the website to you. For this purpose, the IP address must be collected for the duration of the session. The other data is collected for technical reasons in order to ensure stability and security. This also results in the legitimate interest in processing in accordance with Art. 6 para. 1 lit. f GDPR. {Play}
4. Duration of storage
The data is deleted or no longer collected as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. {Play}
VII. Newsletter
1. Scope of the processing of personal data
You can subscribe to a newsletter on our website. To do so, you must enter your e-mail address in the corresponding form on the website, tick the checkbox and click on the ‘SUBSCRIBE’ button. This data will be transmitted to us and stored by us. At the same time, the following additional data is collected and stored when the enquiry is sent: {Play}
- Your IP address
- Date and time of use
Your consent is obtained for the processing of the data as part of the registration process and reference is made to this privacy policy. {Play}
2. Legal basis for the processing of personal data
The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR. {Play}
3. Recipient
We transmit the e-mail address to Sendinblue GmbH. We use this service to manage your subscription and send the newsletter. We have concluded an order processing agreement with Sendinblue GmbH. {Play}
4. Purpose of data processing
The collection and storage of the e-mail address serves the purpose of being able to send you the newsletter. {Play}
5. Duration of storage
The data collected will be stored for as long as the subscription to the newsletter remains active. {Play}
VIII. Categories of recipients of personal data
Personal data will only be transferred to third parties in the cases mentioned in this declaration or if we expressly inform you of this elsewhere. In addition, we sometimes use external processors (Art. 28 GDPR) to provide our services (e.g. host providers, email providers). However, these process personal data exclusively within the European Union. {Play}