Privacy Policy - Data Protection
I. Name and address of the controller in charge for data processing
Controller in charge for data processing within the meaning of the EU-General Data Protection Regulation (GDPR) and all other relevant data protection laws is:
Christin Bettinghaus
Onckenstr. 15
12435 Berlin
GERMANY
(hereinafter also referred to as: We/us)
Tel.: +49 163 2534208
E-Mail: hi@christinbettinghaus.com
Website: www.christinbettinghaus.com
II. General information on data processing
1. Scope of processing of personal data
We process and use personal data of our users and customers only, if this is allowed under applicable laws or if this is neccessary for the purposes of providing you with functioning websites and services. Personal data are only processed if permitted by law or if you consented in the processing of your personal data.
2. Legal basis for data processing
If and to the extent that you have given consent to the processing of your personal data for one or more specific purposes, the legal basis for the processing is Art. 6 (1) lit. a GDPR.
If and to the extent that the processing is neccessary for the performance of a contract to which you are party or in order to take steps at the request of you prior to entering a contract, the legal basis for the processing is Art. 6 (1) lit. b GDPR.
If and to the extent that processing is neccessary for compliance with a legal obligation to which we are subject, the legal basis for the processing is Art. 6 (1) lit. c GDPR.
If and to the extent that processing is neccessary in order to protect the vital interests of you or of another natural person, the legal basis for the processing is Art. 6 (1) lit. d GDPR.
If and to the extent processing is neccessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of you which require protection of personal data, in particular where the data subject is a child, the legal basis for the processing is Art. 6 (1) lit. f GDPR.
3. Deletion of data and storage period
The duration of the storage of personal data is determined by the respective legal retention period (e.g. commercial and tax retention periods). After expiry of this period, the corresponding data will be routinely deleted, provided they are no longer necessary for the performance or initiation of a contract and/or there is no longer any legitimate interest on our part in the further storage.
III. Logfiles when visiting our website
(1) When using our websites for information only, i.e. if you do not register or otherwise provide us with information, information are automatically transmitted to us by your browser. We only collect the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data as it is technically necessary for us to display the website to you:
- IP address (in anonymised form)
- Date and time at the moment of access
- Name and URL of our website
- Source/reference from which you came to the page
We process these data for the purposes of
- providing a stable connection to our website
- providing a comfortable use of our website
- analysing system security and stability of our website
(2) Data processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest of the purposes as listed above. The data will not be used to identify you as our user which is not possible anyway, as only anonymised IP addresses are being processed. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use.
IV. Social Media
You can also visit us on social networks:
On these social networks we inform users about our services. For the processing of personal data on these social networks the terms of service and privacy policy of the companies that are operating these social networks apply. We do not have an influence on the processing of personal data on these social networks. If you use these social networks to get in contact with us we will only use your personal data to communicate with you.
V. Rights of the data subject
If your personal data are being processed, you are data subject within the meaning of the GDPR and you have the following rights towards the controller of your data:
1. Right of information
Pursuant to Art. 15 GDPR you shall have the right to obtain information from the controller as to whether or not personal data concerning you are being processed, and, where that is the case, access to personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom personal data have been or will be disclosed; where possible, the envisaged period for which the personal data will bestored, or, if not possible, the criteria used to determine that period; the existence of the right to request from us rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; the right to lodga a complaint with a supervisory authority; where the personal data are not collected from the data subject, any available information as to their source; the existence of automated decision-making, including profiling as well as - if applicable - meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
2. Right of rectification
Pursuant to Art. 16 GDPR you shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you or the right to have incomplete personal data completed.
3. Right of erasure
Pursuant to Art. 17 GDPR you shall have the right to obtain from the controller the erasure of personal data concerning you without undue delay, unlessthat processing is neccessary for exercising the right of freedom of expression and information, for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject, for reasons of public interest or for the establishment, exercise or defence of legal claims.
4. Right to restriction of processing
Pursuant to Art. 18 GDPR you shall have the right to obtain from the controller restrisction of processing where one of the following applies: the accuracy of the personal data is contested by you for a period enabling the controller to verify the accuracy of the personal data; the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead; the controller no longer needs the personal data for the purposes of processing but they are required by you for the establishment, exercise or defence of legal claims; you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override those of you.
5. Right to data portability
Pursuant to Art. 20 GDPR you shall have the right to receive the personal data concerning you which you have provided to the controller in a structured, commonly used and machine-readable format and have the right to transmit thoses data to another controller without hindrance from the controller to which the personal data have been provided where the processing is based on consent and is carried out by automated means.
6. Right of withdrawal
Pursuant to Art. 7 (3) GDPR you shall have the right to withdraw your consent for the processing of personal data at any time with the consequence that we may not continue with the processing which was based on your consent.
7. Right to lodge a complaint
Pursuant to Art. 77 GDPR you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, place of the alleged infringement or controller‘s residence.
8. Right to object
Pursuant to Art. 21 GDPR you shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Art. 6 (1) GDPR or where personal data are processed for direct marketing purposes in which case your right to object has to be respected by the controller irrespective of grounds relating to your particular situation.
Please contact us, if you want to exercise your rights in connection with the processing of your personal data or if you have any other question in regards to the processing of personal data in connection with our online services.
September 2019