Data protection statement

1. Data protection at a glance

General information

The following information provides a simple overview of what happens with your personal information when you visit this web site. Personal information is all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our data protection statement, which can be found below this text.

Data collection on our web site

Who is responsible for the data collection on our web site?

The data processing on this web site is carried out by the web site operator. The web site operator’s contact details can be found in the section of this data protection statement entitled “Information about the responsible party”.

How do we collect your data?

On the one hand, your data is collected because you provide us with it. For example, this could be data which you enter into a contact form.

Other data is collected by our IT systems automatically or with your consent when you visit the web site. This mainly concerns technical data (e.g. web browser, operating system or date/time when web site was accessed). This data is collected automatically as soon as you visit this web site.

What do we use your data for?

Some of the data is collected to ensure that the web site is provided free of errors. Other data can be used to analyse your usage behaviour.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request restriction of the processing of your personal information under certain circumstances. You also have the right to complain to the responsible supervisory authority.

You are welcome to contact us at any time concerning this and other matters concerning data protection.

Analysis tools and third party tools

Your surfing behaviour can be statistically evaluated when you visit this web site. This mainly takes place using so-called analysis programs.

Detailed information about these analysis programs can be found in the following data protection statement.

2. Hosting

We host the content of our web site with the following provider:

All-Inkl

The provider is ALL-INKL.COM - Neue Medien Münnich, owned by René Münnich, Hauptstraße 68, 02742 Friedersdorf (referred to in the following as All-Inkl). Details can be found in the All-Inkl data protection statement: https://all-inkl.com/datenschutzinformationen/.

The use of All-Inkl takes place on the basis of Art. 6 para. 1 lit. f GDPR. We have a justified interest in having our web site displayed in a way that is as reliable as possible. Provided that appropriate consent has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and section 25 para. 1 of the Telecommunications Digital Services Data Protection Act (TDDDG), provided that the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) in the meaning of the TDDDG. The consent can be revoked at any time.

Order processing

We have signed an order processing contract (AVV) for the use of the above-mentioned service. This is a contract which is prescribed by data protection law which ensures that the service can only process the personal information of our web site visitors in accordance with our instructions and in accordance with the GDPR.

3. General notes and mandatory information

Data protection

The operators of these pages take the protection of your personal information very seriously. We treat your personal information confidentially, in accordance with the statutory data protection guidelines and this data protection statement.

Various items of personal information are collected when you visit this web site. Personal information consists of data with which you can be personally identified. This data protection statement explains which data we can collect and what we use it for. It also explains how and for what purpose this takes place.

We would like to draw your attention to the fact that online data transfers (e.g. during e-mail communication) may involve security risks. It is impossible to provide data with complete protection against unauthorised access by third parties.

Note concerning the responsible authority

The responsible authority for the data processing on this web site is:

Malsch GmbH
Rohbergstraße 9
36208 Wildeck-Obersuhl, Germany

Phone: +49 6626 915100
E-Mail: info@bettenmalsch.de

The responsible authority is the natural or juristic person who decides on the purposes and means of the processing of personal information (e.g. names, e-mail addresses or the like), either individually or together with others.

Duration of storage

Unless a more specific storage duration has been specified within this data protection statement, your personal information will be stored by us until the purpose of the data processing no longer exists. If you submit a legitimate deletion request or revoke your consent for data processing, your data will be deleted unless we have other legally permitted reasons for storing your personal information (e.g. retention period under tax or commercial law); in the latter case, deletion will take place when these reasons no longer apply.

General information about the legal basis for the data processing on this web site

If you have given your consent to data processing, we will process your personal information on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, provided that special categories of data in accordance with Art. 9 para. 1 GDPR are being processed. In the case of explicit consent for the transmission of personal information to non-member states, the data processing also takes place on the basis of Art. 49 para. 1 lit. a GDPR. If you have given consent for the storage of cookies or access to information on your terminal device (e.g. via device fingerprinting), the data processing also takes place on the basis of section 25 para. 1 TDDDG. The consent can be revoked at any time. If your data is required to fulfil a contract or carry out pre-contractual measures, we will process your data on the basis of Art. 6 para. 1 lit. b GDPR. We will also process your data if it is required to fulfil a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. The data processing can also take place on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Information about the legal basis that applies in individual cases is provided in the following paragraphs of this data protection statement.

Data protection officer

We have nominated a data protection officer.

bits + bytes it-solutions GmbH & Co. KG Krombacher Straße 24
57223 Kreuztal, Germany
Phone: 0700 20 30 10 30
E-mail: datenschutz@bits-bytes.de

Recipient of personal information

Within the scope of our business activities, we cooperate with various external bodies. In some cases, personal information also needs to be transferred to these external bodies. We only pass on personal information to external bodies if this is needed to fulfil a contract, if we are legally obliged to do so (e.g. passing on data to tax authorities), if we have a legitimate interest in the transfer in accordance with Art. 6 para. 1 lit. f GDPR or if another legal basis allows the information to be passed on. When processing companies are being used, we only pass on the personal information of our customers on the basis of a valid order processing contract. In the case of joint processing, a joint processing contract is concluded.

Revocation of your consent for data processing

Many data processing procedures are only possible if you have given your explicit consent. You can revoke consent that you have already given at any time. The legality of the data processing which has been carried out up to the time of revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL INFORMATION AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION STATEMENT. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL INFORMATION UNLESS WE CAN PROVE COMPELLING LEGITIMATE REASONS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTION IN ACCORDANCE WITH ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF PERSONAL INFORMATION THAT CONCERNS YOU FOR THE PURPOSE OF THIS KIND OF ADVERTISING AT ANY TIME. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSES OF DIRECT MARKETING (OBJECTION IN ACCORDANCE WITH ART. 21 PARA. 2 GDPR).

Right to complain to the responsible supervisory body

In the event of violations of the GDPR, the persons affected can complain to a supervisory authority, particularly in the member state of their habitual residence, their place of work or the place of the alleged violation. The right to complain is without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in order to fulfil a contract given to you or to a third party in a common, machine-readable format. If you request direct transfer of the data to another responsible party, this will only take place if it is technically feasible.

Information, correction and deletion

Within the framework of the applicable legal provisions,you are entitled at any time to obtain free information about your stored personal data, its origin and the recipient, and the purpose of the data processing and, if applicable, have the right to correction or deletion of this data. You can contact us at any time about this and other matters concerning personal data.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data. You can contact us at any time to do this. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data which we have stored, we will usually need time to check this. You have the right to request restriction of the processing of your personal data for the duration of the checking.
• If the processing of your personal data was/is unlawful, you can request restriction of the data processing rather than deletion of the data.
• If we no longer require your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request restriction of the processing of your personal data rather than the deletion thereof.
• If you have lodged an objection in accordance with Art. 21 para. 1 GDPR, a balance must be struck between your interests and ours. Until it is clear whose interests prevail, you have the right to request restriction of the processing of your personal data.

If you have restricted the processing of your personal data, with the exception of the storage thereof it may only be processed if you have given your consent or for the purpose of asserting, exercising or defending legal claims or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or an EU member state.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the operator of the web site. An encrypted connection is recognisable from the fact that the address line of the browser changes from "http://" to "https://" and by the padlock symbol in your browser line.

If SSL or TLS encryption is activated, the data which you send to us cannot be read by third parties.

Objection to advertising emails

The use of contact data which has been published within the context of legal notice regulations for the sending of promotional material and information which has not been explicitly requested is hereby expressly prohibited. The site operators explicitly reserve the right to take legal action against any party which sends unsolicited advertising information by means of spam e-mails, for example.

4.  Data collection on our web site

Cookies

Our websites use so-called "cookies". Cookies are small data packets which are harmless to your terminal device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your terminal device until you delete them or they are automatically deleted by your web browser.

Cookies may come from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies make it possible to integrate certain third-party services within websites (cookies for processing payment services, for example).

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies can be used to evaluate user behaviour, or for advertising purposes.

Cookies which are required to perform electronic communication, provide certain functions you require (e.g. for the shopping cart function) or optimise the website (e.g. cookies for measuring the web audience) (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of necessary cookies for providing its services in a technically error-free and optimised way. If consent has been requested for the storage of cookies and comparable recognition technologies, processing will take place exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG), whereby the consent can be revoked at any time.

You can set up your browser to inform you about the setting of cookies, and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or all cookies, and activate the automatic deletion of cookies when the browser is closed. The functionality of this website may be restricted if cookies are deactivated.

You can find out which cookies and services are used on this website in this data protection statement.