Privacy

1. Responsible body

The responsible body within the meaning of data protection law, in particular the EU General Data Protection Regulation (GDPR), is:

j.heinz@digitalaufstieg.de

2. Hosting

This website is hosted by the service provider Lovable, which supports us in operating the website as a data processor (Art. 28 GDPR). When the website is accessed, the data required for its provision is processed on the hosting provider's servers.

As the hosting provider may also use systems outside the European Union, a transfer to third countries (in particular the USA) cannot be ruled out. Any such transfer takes place only on the basis of appropriate safeguards within the meaning of Art. 44 et seq. GDPR, in particular the standard contractual clauses adopted by the European Commission.

3. Server log files

Each time the website is called up, the server automatically records information about the access request. This includes, among other things, the IP address, the date and time of the request, the page requested, the browser type and operating system, and the previously visited page (referrer URL).

These data serve the secure and error-free operation of the website and the defence against attacks, and are not merged with other data sources. The legal basis is our legitimate interest in uninterrupted and secure operation (Art. 6(1)(f) GDPR). Log data is deleted as soon as it is no longer required for this purpose.

4. Making contact

If you contact us via the contact form or by email, we process the information you provide – name, business email address, company and message – solely to handle your request and in case of follow-up questions.

The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract, and otherwise our legitimate interest in answering your request (Art. 6(1)(f) GDPR). We store this information for as long as is needed to handle your request and thereafter only within statutory retention periods. It is not passed on to third parties.

5. Cookies and tracking

This website does not set cookies for advertising or analysis purposes and does not embed any analytics or marketing services. Your usage behaviour is not recorded for statistical or advertising purposes. No tracking takes place.

6. Fonts and content

The fonts used on this website are embedded locally. When the pages are accessed, no connection is established to font providers' servers (e.g. Google Fonts).

7. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser address line begins with “https://”.

8. Recipients and storage period

Personal data is not passed on to third parties unless this is necessary for the performance of a contract, we are legally obliged to do so, or you have consented. A transfer to third countries takes place only within the scope of the hosting described above.

We store personal data only for as long as is necessary for the stated purposes or as required by statutory retention periods. Once the purpose ceases to apply or the periods expire, the data is deleted.

9. Your rights

You have the following rights with regard to your personal data: the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR), and the right to object to processing based on a legitimate interest (Art. 21 GDPR).

Where we base processing on your consent, you may withdraw it at any time with effect for the future (Art. 7(3) GDPR). An informal email to the address given above is sufficient to exercise your rights.

10. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR). The competent authority is in particular that of the federal state in which we are based: The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

11. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

12. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. The new privacy policy will then apply to your next visit.