A General information
1 Responsible and data protection officer
1.1 Responsible for this website is: Martin Oeding Vides, Stresemannstraße 86, 22679 Hamburg, martin@bajogrande.com.
1.2 We are not required to appoint a data protection officer.
1.3 Our website is hosted at ALL-INKL.COM (www.all-inkl.com), ie technically made available on the web servers of this web host. The web host is a processor obligated by us according to Art. 28 DS-GVO.
2 rights of data subjects
If we collect personal data from you, you have the following rights as the “data subject”:
2.1 Right to Information
You can request information according to Art. 15 DS-GVO about your personal data that we process.
2.2 Right to Object
You have the right to object on the special grounds of Art. 21 Para. 1 DS-GVO. We will inform you about this separately from this information under "B".
2.3 Right to Rectification
If the information concerning you is not (or no longer) correct, you can request a correction in accordance with Art. 16 DS-GVO. If your data is incomplete, you can request a completion.
2.4 Right to erasure
You can request the deletion of your personal data under the conditions of Art. 17 DS-GVO.
2.5 Right to restriction of processing
In the cases of Art. 18 DS-GVO, you have the right to demand a restriction of the processing of your personal data ("blocking").
2.6 Right to Complain
If you believe that the processing of your personal data violates data protection law, according to Art. 77 Para. 1 DS-GVO the right to complain to a data protection supervisory authority of your choice.
2.7 Right to data portability
In the event that you have provided us with personal data in accordance with Art. 20 Para. 1 DS-GVO, you have the right to transfer data that we process automatically on the basis of your consent or in fulfillment of a contract to yourself or to third parties in a structured, common and machine-readable format. The collection of the data for the provision of the website and the storage of the log files (subsection 3.1 below) are absolutely necessary for the operation of the website. They are therefore not based on a consent pursuant to Art. 6 Para. 1 Letter a DS-GVO or on a contract pursuant to Art. 6 Para. 1 Letter b DS-GVO, but are pursuant to Art. 6 Para. 1 Letter f DS-GVO justified. The requirements of Art. 20 Para. 1 DS-GVO are therefore not met in this respect.
3 Procedure: Providing the website and creating log files
3.1 Which data is processed for which purpose?
Each time the content of the website is accessed, the web server of our web host, where our website is stored, temporarily collects and stores information (data) from the internet browser of the accessing computer or end device of the user. This data may allow the user to be identified and is therefore personal data.
3.1.1 The following data is collected and stored by our web host:
IP address of the user,
Date and time the website was accessed,
the protocol, e.g. HTTP,
the request method "Get" or "Post",
Content of the request or specification of the retrieved file that was sent to the user,
the access status (successful transmission, errors, etc.),
the amount of data transferred in bytes,
incoming and outgoing data traffic ("traffic"),
a process identification number (“Process ID”),
the time it takes for the web server to respond to the user's request,
the website from which the user accessed it,
the browser used by the user, the operating system, the interface, the language of the browser and the version of the browser software.
3.1.2 The temporary storage of this user data is necessary for the course of a website visit in order to enable delivery of the website. To do this, the user's IP address must be saved for the duration of the session (ie the website visit).
3.1.3 A further storage of the IP address with the following data from the above list beyond this purpose takes place in log files (logs). This is done so that our web host can ensure the functionality of the website and the security of the information technology systems.
3.2 On what legal basis is this data processed? The data from Section 3.1 is collected and processed by our web host for the stated temporary storage purpose and also for the further storage purpose in accordance with Article 6 Paragraph 1 Letter f DS-GVO. The legitimate interest in data processing also lies in these purposes. This legitimate interest is the interest of our web host, but also our legitimate interest in a functioning website.
3.3 Are there other recipients of the aforementioned data in addition to the person responsible? As our processor, our web host has technical access to the data mentioned in 3.1.
3.4 How long is the data stored? The data from 3.1.1 will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. When the website is provided, this is the case when the respective session has ended. The log files are retained for a maximum of 7 days, unless a security event requires longer retention.
3.5 Is there a provision obligation? You must provide our web host with the data from 3.1. Otherwise you will not be able to use our website technically and our web host cannot guarantee secure technical operation.
4 Procedure: Use of e-mail address and contact form
4.1 Which data is processed for which purpose?
Insofar as we provide you with an e-mail address and a contact form with input fields, this serves the purpose of enabling you to contact us. If you transmit personal data to us, we will store it and process it for the purpose of establishing contact.
4.2 On what legal basis is this data processed?
The data from Section 4.1 is processed on the basis of Art. 6 Para. 1 Letter f DS-GVO (legitimate interest of us as the responsible body). If your request is aimed at concluding a contract, then Art. 6 Para. 1 Letter b DS-GVO is an additional legal basis (initiation, conclusion and execution of a contract).
4.3 Are there other recipients of the aforementioned data in addition to the person responsible?
As our processor, our web host has technical access to the data mentioned in 4.1.
4.4 How long is the data stored?
The data from 4.1 will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case for the personal data sent to us by e-mail or the contact form when the respective correspondence with the user has ended and the storage is not required for other reasons. The conversation is over when it can be inferred from the circumstances that the facts in question have been finally clarified.
4.5 Is there a provision obligation?
You are not obliged to provide us with data from 4.1. You don't have to communicate with us.
5 Cookies and Usage Tracking
5.1 Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. If a user calls up a website, a cookie can be stored on the user's operating system. A cookie contains a characteristic character string that enables the user's browser to be uniquely identified when the website is called up again.
5.1.1 Technically necessary cookies are processed by us on the basis of Art. 6 Para. 1 Letter f DS-GVO (legitimate interest). Technically necessary cookies help to make a website usable by enabling basic functions such as the use of contact forms or access to secure areas of the website. A website cannot function properly without technically necessary cookies. We do not use cookies that are only set based on your consent in accordance with Art. 6 Para. 1 Letter a DS-GVO (e.g. preference cookies, statistical cookies, marketing cookies).
5.1.2 Removal option: The user can prevent or restrict the installation of cookies by setting their browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. However, if the user prevents or restricts the installation of cookies, this may mean that not all functions of the website can be used to their full extent.
5.1.3 Technically necessary cookie "wbk_sid": If a login form or a contact form is set up on our website, this HTTP cookie is stored on the user's operating system. This cookie contains a long combination of numbers and letters ("ID"). The purpose of this cookie is that the user can be recognized as such and distinguished from abusive users (e.g. SPAM bots) when the sending of login data or contact information is called up. If the user closes the browser, the cookie is automatically deleted from the user's operating system. It is therefore only valid for the duration of the visit to our website (session cookie).
5.2 Usage tracking: Analysis programs and other techniques to evaluate usage behavior during your visit to our website (so-called "tracking") are not used.
6 Technical Measures
6.1 Our websites are provided with active SSL or TLS encryption for security reasons and to protect the transmission of confidential content, for example via inquiries that you send to us as the website operator. An encrypted connection can be recognized by the fact that the address line of the browser changes from "http://" to "https://" and a lock symbol can be seen in the browser line. As a result of this encryption, data that you transmit to us cannot be read by third parties.
6.2 If you contact us using an e-mail address provided on our website, the transport of the e-mail content to us is not end-to-end encrypted. This means that the e-mails are usually encrypted during transport via the e-mail provider involved, but are unencrypted on the servers there. Contacting us via the contact form provided is therefore technically secure communication.
6.3 Insofar as you can view videos on our websites, this is done exclusively via the technology of linking to the respective video portal of a third party on which videos are stored under the data protection responsibility of the operator of the portal. The respective video portal is therefore not directly embedded in our website. This ensures that user information is not transmitted to the portal when the website on which the video is integrated is loaded. It is also guaranteed that the mere link cannot set cookies from the portals or the advertising partners of these portals on your end device. Only after you deliberately click on the video preview image is a connection to the third-party portal established and the associated data processing triggered. However, this and the possible data processing of your user data on the linked portal then only takes place if you wish to see the video there. The resulting data processing is beyond our control and is the responsibility of these portals, which provide more or less detailed information about their data processing. If you do not agree to the data processing by the third party, please do not click on the video thumbnail.
B Special information
Special right to object according to Art. 21 Para. 1 DS-GVO
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Article 6 Paragraph 1 Letter f DS-GVO, pursuant to Article 21 Paragraph 1 DS-GVO to insert
We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves us to assert, exercise or defend legal claims.
C Notes on B
Regarding the procedure under A, Section 3.1.: The collection of data for the provision of the website and the storage of the log files are absolutely necessary for the operation of the website. Consequently, there are no interests of a data subject that override our interests.
Regarding the procedure under A, Section 4.1: You must explain to us in detail any interests you may have (your “particular situation”) so that we can reconsider your interests. If our interests in further storage do not prevail, the personal data stored in the course of making contact will be deleted.