Pri­vacy Policy

1. An over­view of data pro­tec­tion

Gen­er­al inform­a­tion

The fol­low­ing inform­a­tion will provide you with an easy to nav­ig­ate over­view of what will hap­pen with your per­son­al data when you vis­it this web­site. The term “per­son­al data” com­prises all data that can be used to per­son­ally identi­fy you. For detailed inform­a­tion about the sub­ject mat­ter of data pro­tec­tion, please con­sult our Data Pro­tec­tion Declar­a­tion, which we have included beneath this copy.

Data record­ing on this web­site

Who is the respons­ible party for the record­ing of data on this web­site (i.e., the “con­trol­ler”)?

The data on this web­site is pro­cessed by the oper­at­or of the web­site, whose con­tact inform­a­tion is avail­able under sec­tion “Inform­a­tion about the respons­ible party (referred to as the “con­trol­ler” in the GDPR)” in this Pri­vacy Policy.

How do we record your data?

We col­lect your data as a res­ult of your shar­ing of your data with us. This may, for instance be inform­a­tion you enter into our con­tact form.

Oth­er data shall be recor­ded by our IT sys­tems auto­mat­ic­ally or after you con­sent to its record­ing dur­ing your web­site vis­it. This data com­prises primar­ily tech­nic­al inform­a­tion (e.g., web browser, oper­at­ing sys­tem, or time the site was accessed). This inform­a­tion is recor­ded auto­mat­ic­ally when you access this web­site.

What are the pur­poses we use your data for?

A por­tion of the inform­a­tion is gen­er­ated to guar­an­tee the error free pro­vi­sion of the web­site. Oth­er data may be used to ana­lyze your user pat­terns. If con­tracts can be con­cluded or ini­ti­ated via the web­site, the trans­mit­ted data will also be pro­cessed for con­tract offers, orders or oth­er order enquir­ies.

What rights do you have as far as your inform­a­tion is con­cerned?

You have the right to receive inform­a­tion about the source, recip­i­ents, and pur­poses of your archived per­son­al data at any time without hav­ing to pay a fee for such dis­clos­ures. You also have the right to demand that your data are rec­ti­fied or erad­ic­ated. If you have con­sen­ted to data pro­cessing, you have the option to revoke this con­sent at any time, which shall affect all future data pro­cessing. Moreover, you have the right to demand that the pro­cessing of your data be restric­ted under cer­tain cir­cum­stances. Fur­ther­more, you have the right to log a com­plaint with the com­pet­ent super­vising agency.

Please do not hes­it­ate to con­tact us at any time if you have ques­tions about this or any oth­er data pro­tec­tion related issues.

2. Host­ing

We are host­ing the con­tent of our web­site at the fol­low­ing pro­vider:

Stra­to

The pro­vider is Stra­to AG, Otto-Ostrowski-Straße 7, 10249 Ber­lin (here­in­after referred to as “Stra­to”). When you vis­it our web­site, Stra­to records vari­ous log­files, includ­ing your IP addresses.

For more inform­a­tion, please con­sult the Stra­to Data Pri­vacy Policy: https://www.strato.de/datenschutz/.

Stra­to is used on the basis of Art. 6(1)(f) GDPR. We have a legit­im­ate interest in a depic­tion of our web­site that is as reli­able as pos­sible. If appro­pri­ate con­sent has been obtained, the pro­cessing is car­ried out exclus­ively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the stor­age of cook­ies or the access to inform­a­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. This con­sent can be revoked at any time.

Data pro­cessing

We have con­cluded a data pro­cessing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dated by data pri­vacy laws that guar­an­tees that they pro­cess per­son­al data of our web­site vis­it­ors only based on our instruc­tions and in com­pli­ance with the GDPR.

3. Gen­er­al inform­a­tion and man­dat­ory inform­a­tion

Data pro­tec­tion

The oper­at­ors of this web­site and its pages take the pro­tec­tion of your per­son­al data very ser­i­ously. Hence, we handle your per­son­al data as con­fid­en­tial inform­a­tion and in com­pli­ance with the stat­utory data pro­tec­tion reg­u­la­tions and this Data Pro­tec­tion Declar­a­tion.

Whenev­er you use this web­site, a vari­ety of per­son­al inform­a­tion will be col­lec­ted. Per­son­al data com­prises data that can be used to per­son­ally identi­fy you. This Data Pro­tec­tion Declar­a­tion explains which data we col­lect as well as the pur­poses we use this data for. It also explains how, and for which pur­pose the inform­a­tion is col­lec­ted.

We here­with advise you that the trans­mis­sion of data via the Inter­net (i.e., through e‑mail com­mu­nic­a­tions) may be prone to secur­ity gaps. It is not pos­sible to com­pletely pro­tect data against third-party access.

Inform­a­tion about the respons­ible party (referred to as the “con­trol­ler” in the GDPR)

The data pro­cessing con­trol­ler on this web­site is:

Rain­er Christ­mann
Atura Con­sult
Fuch­säck­er 11
72654 Neck­ar­ten­z­lin­gen

Phone: +49 7127 925 389
E‑mail: info@atura-consult.de

The con­trol­ler is the nat­ur­al per­son or leg­al entity that single-handedly or jointly with oth­ers makes decisions as to the pur­poses of and resources for the pro­cessing of per­son­al data (e.g., names, e‑mail addresses, etc.).

Stor­age dur­a­tion

Unless a more spe­cif­ic stor­age peri­od has been spe­cified in this pri­vacy policy, your per­son­al data will remain with us until the pur­pose for which it was col­lec­ted no longer applies. If you assert a jus­ti­fied request for dele­tion or revoke your con­sent to data pro­cessing, your data will be deleted, unless we have oth­er leg­ally per­miss­ible reas­ons for stor­ing your per­son­al data (e.g., tax or com­mer­cial law reten­tion peri­ods); in the lat­ter case, the dele­tion will take place after these reas­ons cease to apply.

Gen­er­al inform­a­tion on the leg­al basis for the data pro­cessing on this web­site

If you have con­sen­ted to data pro­cessing, we pro­cess your per­son­al data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if spe­cial cat­egor­ies of data are pro­cessed accord­ing to Art. 9 (1) DSGVO. In the case of expli­cit con­sent to the trans­fer of per­son­al data to third coun­tries, the data pro­cessing is also based on Art. 49 (1)(a) GDPR. If you have con­sen­ted to the stor­age of cook­ies or to the access to inform­a­tion in your end device (e.g., via device fin­ger­print­ing), the data pro­cessing is addi­tion­ally based on § 25 (1) TDDDG. The con­sent can be revoked at any time. If your data is required for the ful­fill­ment of a con­tract or for the imple­ment­a­tion of pre-con­trac­tu­al meas­ures, we pro­cess your data on the basis of Art. 6(1)(b) GDPR. Fur­ther­more, if your data is required for the ful­fill­ment of a leg­al oblig­a­tion, we pro­cess it on the basis of Art. 6(1)© GDPR. Fur­ther­more, the data pro­cessing may be car­ried out on the basis of our legit­im­ate interest accord­ing to Art. 6(1)(f) GDPR. Inform­a­tion on the rel­ev­ant leg­al basis in each indi­vidu­al case is provided in the fol­low­ing para­graphs of this pri­vacy policy.

Recip­i­ents of per­son­al data

In the scope of our busi­ness activ­it­ies, we cooper­ate with vari­ous extern­al parties. In some cases, this also requires the trans­fer of per­son­al data to these extern­al parties. We only dis­close per­son­al data to extern­al parties if this is required as part of the ful­fill­ment of a con­tract, if we are leg­ally oblig­ated to do so (e.g., dis­clos­ure of data to tax author­it­ies), if we have a legit­im­ate interest in the dis­clos­ure pur­su­ant to Art. 6 (1)(f) GDPR, or if anoth­er leg­al basis per­mits the dis­clos­ure of this data. When using pro­cessors, we only dis­close per­son­al data of our cus­tom­ers on the basis of a val­id con­tract on data pro­cessing. In the case of joint pro­cessing, a joint pro­cessing agree­ment is con­cluded.

Revoc­a­tion of your con­sent to the pro­cessing of data

A wide range of data pro­cessing trans­ac­tions are pos­sible only sub­ject to your express con­sent. You can also revoke at any time any con­sent you have already giv­en us. This shall be without pre­ju­dice to the law­ful­ness of any data col­lec­tion that occurred pri­or to your revoc­a­tion.

Right to object to the col­lec­tion of data in spe­cial cases; right to object to dir­ect advert­ising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a com­plaint with the com­pet­ent super­vis­ory agency

In the event of viol­a­tions of the GDPR, data sub­jects are entitled to log a com­plaint with a super­vis­ory agency, in par­tic­u­lar in the mem­ber state where they usu­ally main­tain their dom­i­cile, place of work or at the place where the alleged viol­a­tion occurred. The right to log a com­plaint is in effect regard­less of any oth­er admin­is­trat­ive or court pro­ceed­ings avail­able as leg­al recourses.

Right to data port­ab­il­ity

You have the right to have data that we pro­cess auto­mat­ic­ally on the basis of your con­sent or in ful­fill­ment of a con­tract handed over to you or to a third party in a com­mon, machine-read­able format. If you should demand the dir­ect trans­fer of the data to anoth­er con­trol­ler, this will be done only if it is tech­nic­ally feas­ible.

Inform­a­tion about, rec­ti­fic­a­tion and erad­ic­a­tion of data

With­in the scope of the applic­able stat­utory pro­vi­sions, you have the right to demand inform­a­tion about your archived per­son­al data, their source and recip­i­ents as well as the pur­pose of the pro­cessing of your data at any time. You may also have a right to have your data rec­ti­fied or erad­ic­ated. If you have ques­tions about this sub­ject mat­ter or any oth­er ques­tions about per­son­al data, please do not hes­it­ate to con­tact us at any time.

Right to demand pro­cessing restric­tions

You have the right to demand the impos­i­tion of restric­tions as far as the pro­cessing of your per­son­al data is con­cerned. To do so, you may con­tact us at any time. The right to demand restric­tion of pro­cessing applies in the fol­low­ing cases:

  • In the event that you should dis­pute the cor­rect­ness of your data archived by us, we will usu­ally need some time to veri­fy this claim. Dur­ing the time that this invest­ig­a­tion is ongo­ing, you have the right to demand that we restrict the pro­cessing of your per­son­al data.
  • If the pro­cessing of your per­son­al data was/is con­duc­ted in an unlaw­ful man­ner, you have the option to demand the restric­tion of the pro­cessing of your data instead of demand­ing the erad­ic­a­tion of this data.
  • If we do not need your per­son­al data any longer and you need it to exer­cise, defend or claim leg­al enti­tle­ments, you have the right to demand the restric­tion of the pro­cessing of your per­son­al data instead of its erad­ic­a­tion.
  • If you have raised an objec­tion pur­su­ant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each oth­er. As long as it has not been determ­ined whose interests pre­vail, you have the right to demand a restric­tion of the pro­cessing of your per­son­al data.

If you have restric­ted the pro­cessing of your per­son­al data, these data – with the excep­tion of their archiv­ing – may be pro­cessed only sub­ject to your con­sent or to claim, exer­cise or defend leg­al enti­tle­ments or to pro­tect the rights of oth­er nat­ur­al per­sons or leg­al entit­ies or for import­ant pub­lic interest reas­ons cited by the European Uni­on or a mem­ber state of the EU.

SSL and/or TLS encryp­tion

For secur­ity reas­ons and to pro­tect the trans­mis­sion of con­fid­en­tial con­tent, such as pur­chase orders or inquir­ies you sub­mit to us as the web­site oper­at­or, this web­site uses either an SSL or a TLS encryp­tion pro­gram. You can recog­nize an encryp­ted con­nec­tion by check­ing wheth­er the address line of the browser switches from “http://” to “https://” and also by the appear­ance of the lock icon in the browser line.

If the SSL or TLS encryp­tion is activ­ated, data you trans­mit to us can­not be read by third parties.

4. Record­ing of data on this web­site

Serv­er log files

The pro­vider of this web­site and its pages auto­mat­ic­ally col­lects and stores inform­a­tion in so-called serv­er log files, which your browser com­mu­nic­ates to us auto­mat­ic­ally. The inform­a­tion com­prises:

  • The type and ver­sion of browser used
  • The used oper­at­ing sys­tem
  • Refer­rer URL
  • The host­name of the access­ing com­puter
  • The time of the serv­er inquiry
  • The IP address

This data is not merged with oth­er data sources.

This data is recor­ded on the basis of Art. 6(1)(f) GDPR. The oper­at­or of the web­site has a legit­im­ate interest in the tech­nic­ally error free depic­tion and the optim­iz­a­tion of the operator’s web­site. In order to achieve this, serv­er log files must be recor­ded.

Con­tact form

If you sub­mit inquir­ies to us via our con­tact form, the inform­a­tion provided in the con­tact form as well as any con­tact inform­a­tion provided therein will be stored by us in order to handle your inquiry and in the event that we have fur­ther ques­tions. We will not share this inform­a­tion without your con­sent.

The pro­cessing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the exe­cu­tion of a con­tract or if it is neces­sary to carry out pre-con­trac­tu­al meas­ures. In all oth­er cases the pro­cessing is based on our legit­im­ate interest in the effect­ive pro­cessing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agree­ment (Art. 6(1)(a) GDPR) if this has been reques­ted; the con­sent can be revoked at any time.

The inform­a­tion you have entered into the con­tact form shall remain with us until you ask us to erad­ic­ate the data, revoke your con­sent to the archiv­ing of data or if the pur­pose for which the inform­a­tion is being archived no longer exists (e.g., after we have con­cluded our response to your inquiry). This shall be without pre­ju­dice to any man­dat­ory leg­al pro­vi­sions, in par­tic­u­lar reten­tion peri­ods.

Request by e‑mail, tele­phone, or fax

If you con­tact us by e‑mail, tele­phone or fax, your request, includ­ing all res­ult­ing per­son­al data (name, request) will be stored and pro­cessed by us for the pur­pose of pro­cessing your request. We do not pass these data on without your con­sent.

These data are pro­cessed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the ful­fill­ment of a con­tract or is required for the per­form­ance of pre-con­trac­tu­al meas­ures. In all oth­er cases, the data are pro­cessed on the basis of our legit­im­ate interest in the effect­ive hand­ling of inquir­ies sub­mit­ted to us (Art. 6(1)(f) GDPR) or on the basis of your con­sent (Art. 6(1)(a) GDPR) if it has been obtained; the con­sent can be revoked at any time.

The data sent by you to us via con­tact requests remain with us until you request us to delete, revoke your con­sent to the stor­age or the pur­pose for the data stor­age lapses (e.g. after com­ple­tion of your request). Man­dat­ory stat­utory pro­vi­sions — in par­tic­u­lar stat­utory reten­tion peri­ods — remain unaf­fected.

5. Plug-ins and Tools

Google Fonts (loc­al embed­ding)

This web­site uses so-called Google Fonts provided by Google to ensure the uni­form use of fonts on this site. These Google fonts are loc­ally installed so that a con­nec­tion to Google’s serv­ers will not be estab­lished in con­junc­tion with this applic­a­tion.

For more inform­a­tion on Google Fonts, please fol­low this link: https://developers.google.com/fonts/faq and con­sult Google’s Data Pri­vacy Declar­a­tion under: https://policies.google.com/privacy?hl=en.

6. Our social media appear­ances

This pri­vacy policy applies to the fol­low­ing social media pres­ence

Data pro­cessing through social net­works

We main­tain pub­licly avail­able pro­files in social net­works. The indi­vidu­al social net­works we use can be found below.

Social net­works such as Face­book, X etc. can gen­er­ally ana­lyze your user beha­vi­or com­pre­hens­ively if you vis­it their web­site or a web­site with integ­rated social media con­tent (e.g., like but­tons or ban­ner ads). When you vis­it our social media pages, numer­ous data pro­tec­tion-rel­ev­ant pro­cessing oper­a­tions are triggered. In detail:

If you are logged in to your social media account and vis­it our social media page, the oper­at­or of the social media portal can assign this vis­it to your user account. Under cer­tain cir­cum­stances, your per­son­al data may also be recor­ded if you are not logged in or do not have an account with the respect­ive social media portal. In this case, this data is col­lec­ted, for example, via cook­ies stored on your device or by record­ing your IP address.

Using the data col­lec­ted in this way, the oper­at­ors of the social media portals can cre­ate user pro­files in which their pref­er­ences and interests are stored. This way you can see interest-based advert­ising inside and out­side of your social media pres­ence. If you have an account with the social net­work, interest-based advert­ising can be dis­played on any device you are logged in to or have logged in to.

Please also note that we can­not retrace all pro­cessing oper­a­tions on the social media portals. Depend­ing on the pro­vider, addi­tion­al pro­cessing oper­a­tions may there­fore be car­ried out by the oper­at­ors of the social media portals. Details can be found in the terms of use and pri­vacy policy of the respect­ive social media portals.

Leg­al basis

Our social media appear­ances should ensure the widest pos­sible pres­ence on the Inter­net. This is a legit­im­ate interest with­in the mean­ing of Art. 6 (1) lit. f GDPR. The ana­lys­is pro­cesses ini­ti­ated by the social net­works may be based on diver­gent leg­al bases to be spe­cified by the oper­at­ors of the social net­works (e.g., con­sent with­in the mean­ing of Art. 6 (1) (a) GDPR).

Respons­ib­il­ity and asser­tion of rights

If you vis­it one of our social media sites (e.g., Face­book), we, togeth­er with the oper­at­or of the social media plat­form, are respons­ible for the data pro­cessing oper­a­tions triggered dur­ing this vis­it. You can in prin­ciple pro­tect your rights (inform­a­tion, cor­rec­tion, dele­tion, lim­it­a­tion of pro­cessing, data port­ab­il­ity and com­plaint) vis-à-vis us as well as vis-à-vis the oper­at­or of the respect­ive social media portal (e.g., Face­book).

Please note that des­pite the shared respons­ib­il­ity with the social media portal oper­at­ors, we do not have full influ­ence on the data pro­cessing oper­a­tions of the social media portals. Our options are determ­ined by the com­pany policy of the respect­ive pro­vider.

Stor­age time

The data col­lec­ted dir­ectly from us via the social media pres­ence will be deleted from our sys­tems as soon as you ask us to delete it, you revoke your con­sent to the stor­age or the pur­pose for the data stor­age lapses. Stored cook­ies remain on your device until you delete them. Man­dat­ory stat­utory pro­vi­sions — in par­tic­u­lar, reten­tion peri­ods — remain unaf­fected.

We have no con­trol over the stor­age dur­a­tion of your data that are stored by the social net­work oper­at­ors for their own pur­poses. For details, please con­tact the social net­work oper­at­ors dir­ectly (e.g., in their pri­vacy policy, see below).

Your rights

You have the right to receive inform­a­tion about the ori­gin, recip­i­ent and pur­pose of your stored per­son­al data at any time and free of charge. You also have the right to object, the right to data port­ab­il­ity and the right to file a com­plaint with the respons­ible reg­u­lat­ory agency. Fur­ther­more, you can request the cor­rec­tion, block­ing, dele­tion and, under cer­tain cir­cum­stances, the restric­tion of the pro­cessing of your per­son­al data.

Indi­vidu­al social net­works

Linked­In

We have a Linked­In pro­file. The pro­vider is the Linked­In Ire­land Unlim­ited Com­pany, Wilton Plaza, Wilton Place, Dub­lin 2, Ire­land. Linked­In uses advert­ising cook­ies.

If you want to dis­able Linked­In advert­ising cook­ies, please use the fol­low­ing link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data trans­mis­sion to the US is based on the Stand­ard Con­trac­tu­al Clauses (SCC) of the European Com­mis­sion. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

For details on how they handle your per­son­al inform­a­tion, please refer to Linked­In’s pri­vacy policy: https://www.linkedin.com/legal/privacy-policy.

The com­pany is cer­ti­fied in accord­ance with the “EU-US Data Pri­vacy Frame­work” (DPF). The DPF is an agree­ment between the European Uni­on and the US, which is inten­ded to ensure com­pli­ance with European data pro­tec­tion stand­ards for data pro­cessing in the US. Every com­pany cer­ti­fied under the DPF is obliged to com­ply with these data pro­tec­tion stand­ards. For more inform­a­tion, please con­tact the pro­vider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5448