1.Name and address of the controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:
Horst Sprenger GmbH
2. Name and address of the data protection officer
Pragma Consulting UG (limited liability)
3.Scope of processing of personal data
3.1. We collect and use personal data of our users only to the extent necessary to provide a functional website as well as our content and services. Essentially, this is the IP address and supplementary information.
3.2. In addition, you have the option to send us data via forms or e-mail. This is done voluntarily; the data processing is carried out according to the chapter “Forms and e-mail contact”.
4.Provision of the website and creation of log files
When calling up and using our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which the access is made (referrer URL)
- Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider
(Our website is not hosted by ourselves, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR for the purpose of providing the website.)
4.1. Purpose and legal basis for data processing
The processing is carried out to protect our overall legitimate interest to display our website and ensure security and stability on the basis of Art. 6 para. lit. f GDPR. The collection of data and storage in log files is mandatory for the operation of the website. Based on the exception according to Art. 21 para. 1 GDPR, there is no right to object to the processing. If the further storage of log files is required by law, the processing is based on Art. 6 para. 1 lit. c GDPR. There is no legal or contractual obligation to provide the data; however, calling up our website is technically not possible without providing the data.
4.2. Duration of storage, objection and removal options
The aforementioned data is stored for the duration of the display of the website [and for technical reasons beyond that for a maximum of (7 days).
5.1. Type and scope of processing
Cookies contain small character strings that are necessary for the technical implementation of our websites and are stored on your terminal device. Cookies do not cause any damage, as they cannot execute programs and do not contain viruses.
5.2. Purpose and legal basis for data processing
5.3. Duration of storage, objection and removal options
6.1. Type and scope of processing
We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offers. To obtain these fonts, you connect to servers of Google Ireland Limited, whereby your IP address is transmitted.
Google does not provide detailed information about the total content transmitted, but assures that it is not linked to other services and is only used to optimize the fonts.
6.2. Purpose and legal basis for data processing
The use of Google Fonts is based on our legitimate interests, i.e. interest in a uniform provision as well as the optimization of our online offer pursuant to Art. 6 para. 1 lit. f. GDPR.
6.3. Duration of storage, objection and removal options
You can prevent the collection and processing of this data by Google by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout?hl=de
7. Forms and e-mail contact
7.1. Our website contains forms that can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.
- The IP address of the user
- Date and time of sending
Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored.
There will be no transfer of the data to third parties in this regard. The data will be used exclusively for processing the inquiry.
7.2. Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given his consent.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f GDPR.
7.3. Purpose of the data processing
The processing of personal data from the input mask is used by us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
7.4. Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
7.5. Objection and removal option
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. If this occurs, the conversation cannot be continued.
All personal data stored in the course of contacting us will be deleted in this case.
8. Your rights
If personal data is processed by you, you are a data subject within the meaning of the GDPR and you are entitled to the following rights against the controller:
8.1. Right to information:
You may request confirmation from the controller pursuant to Art. 15 GDPR as to whether personal data concerning you is being processed by us. To do so, please use one of the contact options.
8.2. Right to rectification
You have a right to rectification and/or completion pursuant to Art. 16 GDPR against the controller, if the processed personal data concerning you are inaccurate or incomplete. We will carry out the rectification without delay.
8.3. Right to restriction of processing
Under certain conditions (Art. 18 GDPR), you can assert your right to restriction of processing. To do so, please use one of the contact options.
8.4. Right to deletion
You may request the controller to delete the personal data concerning you without undue delay, and the controller is obliged to delete such data without undue delay, provided that one of the reasons under Art. 17 GDPR applies. The controller shall take reasonable steps, including technical measures, taking into account the available technology and the cost of implementation, to inform data controllers that process the personal data that you, as data subject, have requested from them the deletion of all links to, or copies or replications of, such personal data. There is no right to deletion insofar as the processing is necessary for compliance with a legal responsibility.
8.5. Right to be informed:
If you have asserted the right to rectification, deletion or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right against the controller to be informed about these recipients.
8.6. Right to data portability
We cannot guarantee the right to data portability of the data collected on the website due to the short storage period.
8.7. Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(f) GDPR.
8.8. Right to lodge a complaint with a supervisory authority
Irrespective of any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you are of the opinion that the processing of personal data relating to you infringes the GDPR.
07 October 2021