Responsible operator—in the following denoted provider—of this website is Gerald Heller, Tannenstrasse 8, 71126 Gäufelden, Germany, email: firstname.lastname@example.org.
The legal foundation of data privacy are the laws and statutes of the Federal Republic of Germany and those of the European Union. In particular, these are the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) and the German Teleservices Act (Telemediengesetz, TMG).
Access Data / Server Logfiles
The provider of this website or its web hosting service provider, respectively, collect data about every access to the website (so-called server log files). This access data includes: Name of the called web page, file, date and time of the access, transferred data volume, notifications on successful invocation, browser type and version, the user’s operating system, referrer URL (i.e., the web page visited previously), IP address, and the requesting provider.
The provider uses the logged data only for statistical analyses in order to operate and improve the website and its services. The provider reserves the right to analyze the stored data, when there are specific indications of unlawful usage of the website.
Use of Personal Data
Personal data are information through which a natural person can be identified, directly or indirectly. They include name, email address, or telephone number. Personal data are, too, information on an individual’s preferences, its company or association affiliations, or what web pages a person has visited.
The provider collects, uses, and shares personal data only as far as he is legally entitled to do so, or as far as the user has declared her or his consent.
When a user contacts the provider, for instance by email or using a contact form, the provider stores the user’s information in order to process the request, or for being able to answer the user’s follow-up questions.
When a user posts comments in a blog or provides other kinds of contributions, the provider stores the user’s IP address. This serves the provider’s security in the event the user’s comments or contributions contain unlawful content (e.g., insults or illegal propaganda). In such cases the user can be made liable for his or her comments or contributions, and the provider has a direct interest in the user’s identity and stored data.
Integration of Third-Party Services and Content
The provider may integrate third-party services and content into his website and associated services. Examples are YouTube videos, Google Maps services, RSS feeds, or graphics from other websites. This integration always requires that the providers of these other services and content (in the following denoted third-party providers) recognize the IP address of the user. Because without IP address they could not send their content to the user’s browser. This means that the IP address is required for displaying these contents and for providing these services.
The provider strives to integrate only those contents and services whose third-party providers use the user’s IP address solely for sending their services and contents. However, the provider has no bearing on a third-party provider’s use of IP addresses. As far as the provider is aware of such additional data uses by third-party providers, he informs the user.
A cookie is a small data file that websites use to store information on a user’s computer by the user’s web browser. This information, for instance, can have the purpose to improve user experience. It can also be statistical data of website usage that the provider uses to improve the website.
The user can control cookie usage. Most browsers can be configured so that cookie usage is constrained or prevented altogether. However, this may inhibit usability of the website or impede some functionality.
Cancellation, Modification, Amendment, Update
The user is entitled to request at no cost from the provider information about the personal data stored about her or him. The user has the right to request correction of inaccurate data, and to request blocking and cancellation of his or her personal data, provided the data does not have to be preserved for legal reasons.