Privacy policy

1. subject of this privacy policy

Thank you for your interest in our website and our offers on our web pages. The protection of your personal data (hereinafter referred to as “data”) is a major and very important concern for us. In the following, we would therefore like to inform you in detail about which data is collected when you visit our website and use our offers there and how it is processed or used by us in the following, as well as which accompanying protective measures we have also taken in technical and organizational terms.

2. responsible party/service provider

The controller pursuant to Art. 4 EU GDPR and at the same time service provider within the meaning of the German Telemedia Act (TMG) is IsarNet AG, Terminalstraße Mitte 18, 85356 Munich, phone +49 89 97007 401, fax +49 89 97007 200, email legal@isarnet.de. The controller is represented by the Executive Board: Andreas Perthel, Harald Weikert, who are also responsible in accordance with Section 55 of the Interstate Broadcasting Treaty. The Data Protection Officer is Mr. Ulrich Emmert, Attorney-at-Law, Schockenriedstr. 8A, 70565 Stuttgart, phone +49 711 469058 0, fax +49 711 469058 99, e-mail datenschutz@isarnet.de.

3. collection and use of your data

We will only collect, process and use all personal data that we obtain from you in the course of your use of our website for the stated purpose. In doing so, we ensure that this only takes place within the framework of the applicable legal provisions or only with your consent. The data will only be processed within the EU and the European Economic Area, unless you are informed below or directly at the time of data collection about a transfer to third countries, stating the respective legal basis and, if necessary, requesting your consent. The provisions on the legal basis for international data transfer and the necessary requirements are available from us on request. We do not make automated individual decisions on the processing of personal data. The scope and type of collection and use of your data differs depending on whether you visit our website only to retrieve information or to make use of the services we offer:
a) Informational use
It is generally not necessary for you to provide personal data in order to use our website for information purposes only.Rather, in this case we only collect and use the data that your Internet browser automatically transmits to us, such as your IP address:It is generally not necessary for you to provide personal data in order to use our website for information purposes only.Rather, in this case we only collect and use the data that your Internet browser automatically transmits to us, such as

• date and time of access to one of our web pages
• your browser type
• your browser settings
• the operating system being used
• the page you last visited
• the amount of data transferred and the access status (file transferred, file not found, etc.) and
• your IP address.

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f GDPR. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.

b) Use of services
If you wish to make use of services offered by us on our website or after contacting us in any other way, it may be necessary for you to provide further data. This is the data that is required for the respective processing in accordance with Art. 6 I b) GDPR, otherwise we cannot provide the desired service. Further offers are listed in Appendix 2. You can provide additional information voluntarily; input fields with optional information are marked accordingly. Your data is collected or used for the purpose of providing the service you have requested. This also includes, for example, an inquiry via our contact form. If the provision of data is required by law, we will inform you of this. Your data may be passed on to service providers supporting us for the aforementioned purpose, which we have of course carefully selected and obliged to comply with the EU General Data Protection Regulation. Otherwise, your data will only be passed on to other third parties if this is permitted by law or if we have received your explicit consent to do so.

4. consent under data protection law

Wir benötigen für die Verarbeitung Ihrer Daten möglicherweise eine Einwilligung in die Verarbeitung Ihrer Daten nach Art. 6 I a DSGVO. Wir sichern zu, dass wir die Daten jeweils nur für den bei der Erhebung angegebenen Zweck verarbeiten und nutzen. Ihre Einwilligung können Sie gesondert im Zusammenhang mit der jeweiligen Datenerhebung abgeben. Sie können sie im Anschluss jederzeit mit Wirkung für die Zukunft widerrufen. Die Einwilligung in Bezug auf Newsletter richtet sich nach § 5, für Cookies bzw. Werbetracker nach untenstehendem § 6 dieser Erklärung.

5. Newsletter

We do not send out newsletters.

6. Use of Cookies

We use cookie technology for our website. Cookies are small text files that are sent from our web server to your browser when you visit our website and are stored on your computer for later retrieval. The purpose of using technically necessary cookies (session cookies) is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. Analysis cookies or web beacons (small graphics for log evaluation) are used to improve the quality of our website and its content and to recognize visitors. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer. We do not give third parties the opportunity to set cookies on our websites. We do not give third parties the opportunity to pass on cookie information. We do not give anyone permission to pass on information from cookies to other companies in non-EU countries. You can determine yourself whether cookies can be set and retrieved using the settings in your browser. For example, you can completely deactivate the storage of cookies in your browser, restrict it to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for feedback. You can also delete cookies in your browser at any time. For technical reasons, however, it is necessary to allow the aforementioned session cookies for the full functionality of our website. We do not use a login area. We do not offer the option of registering with us via a third-party service provider In accordance with Art. 13 of the EU Data Protection Regulation, we will obtain your consent in advance for the use of cookies in accordance with Art. 6 I a GDPR.

7. right of objection

In accordance with Art. 21 EU GDPR, you can object to the processing of your data in the cases specified therein; this applies in particular in cases of processing carried out on the basis of Art. 6 I e or Art. 6 I f or in the form of direct advertising or profiling.

8. data security

We also use technical and organizational security measures to protect personal data that is generated or collected, in particular against accidental or intentional manipulation, loss, destruction or attack by unauthorized persons. Our security measures are continuously improved in line with technological developments. We provide you with various online forms and services with which you can send personal data to us. These forms are protected against access by third parties through the use of TLS encryption. The data that you enter or send to us as a file may be stored by us and processed by agreement. If the use and processing requires the consent of the user or third parties, the consent can be revoked at any time without giving reasons. In this case, however, the fulfillment of the contract by us may be impaired. Depending on the service, you may be asked to make various entries to identify yourself or prevent misuse: a) To identify yourself when submitting data, you may be asked to enter a user-defined ID or other suitable authentication. The data is protected via SFTP or HTTPS against access by third parties in accordance with Art. 32 I a and b GDPR, provided that the user uses the methods of data transmission recommended by us. b) To prevent use by machines, so-called CAPTCHAS in accordance with Art. 32 I b GDPR can be used, which contain images or tasks that cannot be processed by computer scripts.

9. erasure periods

We only store personal data until the purpose of the data storage no longer applies. This does not apply if the user has voluntarily consented to a longer processing of the data or if statutory retention periods or the possible pursuit of legal claims within limitation periods that have not yet expired prevent the deletion (in the case of conflicting retention or limitation periods, it may be necessary to restrict the processing of the data in accordance with Art. 18 EU GDPR).

10. rights of the data subject

Under the applicable laws, you have various rights regarding your personal data. If you wish to exercise these rights, please send your request by e-mail or by post, clearly identifying yourself, to the address given in section 2. Below you will find an overview of your rights:
a) Right of confirmation and information
You have the right to obtain confirmation from us at any time as to whether personal data concerning you is being processed. If this is the case, you have the right to obtain information from us free of charge about the personal data stored about you, together with a copy of this data. You also have the right to the following information:

1. the purposes of processing;
2. the categories of personal data that are processed;
3. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
5. the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by the controller or a right to object to such processing;
6. the existence of a right of appeal to a supervisory authority;
7. if the personal data is not collected from you, all available information about the origin of the data;
8. the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

If personal data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer. b) Right to rectification You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the , you have the right to request the completion of incomplete personal data – also by means of a supplementary declaration. c) Right to erasure (“right to be forgotten“) You have the right to obtain from us the erasure of personal data concerning you without undue delay and we are obliged to erase personal data without undue delay where one of the following grounds applies.

1. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
2. You withdraw your consent on which the processing is based according to point (a) of Article 6(1) GDPR, or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing.
3. You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
4. The personal data was processed unlawfully.
5. The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which we are subject.
6. The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

The right to erasure does not exist if the processing is necessary

1. to exercise the right to freedom of expression and information;
2. for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
3. for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
5. for the assertion, exercise or defense of legal claims.

If we have made the personal data public and we are obliged to delete it in accordance with Art. 17 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data controllers who process the personal data that you have requested them to delete all links to this personal data or copies or replications of this personal data. d) Right to restriction of processing You have the right to obtain from us restriction of processing where one of the following applies:

1. the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data,
2. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
3. we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims, or
4. you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of our company override yours.

If the processing of personal data concerning you has been restricted, such data may only be processed – apart from being stored – with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. e) Right to data portability You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, where

1. the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and
2. the processing is carried out using automated procedures.

In exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible. The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. f) Right to objection You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. You have the right to object, on grounds relating to your particular situation, to processing of personal data concerning you for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest. g) Automated decision-making including profiling You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. h) Right to withdraw data protection consent You have the right to withdraw your consent to the processing of personal data at any time. i) Right of appeal to a supervisory authority You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you is unlawful. j) Right to information If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right vis-à-vis the controller to be informed about these recipients.

Appendix 1 – Data protection provisions for third-party services

We may use third-party services that transmit information in accordance with § 6 above. We use the following statistical tools (services for analyzing log data) on our website:

• Yoast SEO
  • Link to Homepage: https://yoast.com/
  • Link to privacy policy: https://yoast.com/privacy-policy/
• Jetpack
  • Link to Homepage: https://automattic.com/
  • Link to privacy policy: https://automattic.com/privacy/