Privacy policy

1. Name and contact details of the controller responsible for processing data and of the company’s Data Protection Officer
This privacy policy applies to the processing of data by:

Controller:

p-didakt GmbH
Schrammsweg 8a
20249 Hamburg
Germany
Tel. +49 40 23 83 073-00
Fax +49 40 23 83 073-99
Email info@p-didakt.com

External Data Protection Officer:

Rechtsanwalt Paul-Michael Link
Am Grasbrookpark 1a
20457 Hamburg (HafenCity)
Germany
Tel. +49 40 46 65 17 27
Fax +49 40 46 65 17 28
Email office@linklegal.de

2. General information about data processing

a) Scope of personal data processing

We only ever process your personal data to the extent that is necessary for us to deliver our contractual services and provide a functional website.

b) Legal basis for the processing of personal data

When we seek the data subject’s consent to process their personal data, Article 6 (1a) of the EU General Data Protection Regulation (GDPR) constitutes the legal basis for this. When processing of personal data is necessary for the performance of a contract to which the data subject is party, Article 6 (1b) GDPR serves as the legal basis. This also applies to processing that is necessary in order to take steps prior to entering into a contract.
If the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6 (1c) GDPR serves as the legal basis.
In the event that the processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person, Article 6 (1d) GDPR serves as the legal basis.
If processing is necessary for the purposes of a legitimate interest pursued by our company or a third party, except where this interest is overridden by the interests or fundamental rights and freedoms of the data subject, Article 6 (1f) GDPR serves as the legal basis for this processing.

c) Deletion of data and retention periods

The data subject’s personal data will be deleted or blocked as soon as the purpose for which it is being retained no longer applies. Data can be stored beyond this period if this is provided for by European or national legislators in EU regulations, laws or other legislation to which the controller is subject. The data will also be blocked or deleted if the retention period stipulated by the specified standards expires, unless it is necessary to store the data for longer for the purposes of concluding or performing a contract.

3. Collecting and storing personal data, and the nature and purpose of its use

a) When you visit our website

When you visit our website, your browser will automatically send information to our website server. This information will be stored temporarily in a log file and deleted automatically after a maximum of 14 days. This information will not be connected to you personally. We do not merge this data with data from other sources. We collect the following data:

• The anonymized name of the computer being used to access the website (shortened IP address)
• The date, time and time zone of the visit
• The page accessed
• The URL of the website the user has come from (referrer URL)
• The browser and browser version you are using

We process the data listed above for the following purposes:

• To ensure a smooth connection to our website
• To ensure our website provides a comfortable user experience
• To analyze our system security and stability
• For further administrative purposes

The legal basis for the processing of this data is Article 6 (1f) GDPR. Our legitimate interest results from the data collection purposes listed above. Under no circumstances do we use the data we collect to draw conclusions about your identity. When you visit our website, we also use cookies.

b) When you contact us by email

If you have any questions about our services, you have the option of contacting us by email. The essential and necessary processing of data for the purposes of performing a contract or taking steps prior to entering into a contract is based on the legal authorization described in Article 6 (1b) GDPR. If we wish to process your data for any other purpose, we normally need your voluntary consent in line with Article 6 (1a) GDPR. If you provide us with personal data when contacting us by email, we will process this data solely for the purposes of dealing with your contact request. This also constitutes our necessary and legitimate interest in processing your data. Your data will be deleted as soon as it is no longer necessary for pursuing the purpose for which it was collected. In the case of personal data sent by email, this means when the conversation with the user comes to an end. The conversation is considered to be at an end when the circumstances indicate that the subject in question has been conclusively clarified for both parties.

4. Transmission of data to third parties

Your personal data will not be passed on to third parties for any purpose other than those listed below. We will only pass on your personal data to third parties:

• If, in a particular case, you have given your express consent to this in accordance with Article 6 (1a) GDPR
• If, in accordance with Article 6 (1f) GDPR, it is essential for us to pass on your data for the purposes of a legitimate interest pursued by our company, except where this interest is overridden by your interests or fundamental rights and freedoms that necessitate the protection of your data
• If we have a legal obligation to pass on your data in accordance with Article 6 (1c) GDPR
• If this is legally permissible and, in accordance with Article 6 (1b) GDPR, necessary for handling a contractual relationship with you

5. Cookies

We use cookies on our website. Cookies are small files that are sent to your browser with the website data you have actually requested. They are used to store specific, device-related information on the device you are using to access the internet. One purpose of cookies is to enhance the user experience. For example, we use session cookies to track the individual pages and subpages of our website that you have already visited. These cookies are deleted automatically when you leave our website. We also use cookies to collect statistics about usage of our website and for the purpose of optimizing the range of services we offer our customers. When you visit our website again, these cookies enable us to automatically detect that you have visited our website before. They are deleted automatically after a specifically defined period of time. The data processed by cookies is necessary for the aforementioned purposes of the legitimate interests pursued by our company and by third parties in accordance with Article 6 (1f) GDPR.
Most browsers accept cookies automatically, but you can configure your browser to prevent cookies being stored on your device or to ensure a message always pops up before a new cookie is stored on your device. However, fully deactivating cookies may mean that you are unable to use all the functions of our website.

6. Google Maps

We use Google Maps on our website. This service is embedded via an API. Google Maps is supplied by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Your IP address needs to be stored to enable you to use the Google Maps functions. This information is normally sent to a Google server in the USA and stored there. We have no control over this transmission of data and cannot provide any information about how long Google will store data for. If you want to prevent Google from processing data about you through our website, you can block or deactivate JavaScript. However, if you opt out, you will not be able to use the map display. We use Google Maps to display our online presence in an engaging way and make it easy for customers to use our website to locate our company headquarters. This constitutes a legitimate interest in accordance with Article 6 (1f) GDPR. For more information about the scope and purpose of Google’s collection of data and about how Google processes and uses it, please consult Google’s privacy policy (policies.google.com/privacy) and the Google Maps terms of service (https://www.google.com/help/terms_maps/).

7. Analytics/tracking tools

We use the analytics and tracking tool described below only when you have given us your prior consent, as set out by Article 6 (1a) GDPR. We use the tracking measures in our pursuit of a design that meets users’ needs and for the purpose of the ongoing optimization of our website. In addition, we use these tracking measures to collect statistics about usage of our website and for the purpose of optimizing the range of services we offer.

Google Analytics

To ensure our website design meets our users’ needs and to optimize our range of services on an ongoing basis, we use Google Analytics, a website analysis service offered by Google (https://www.google.de/intl/de/about/), provided you have given us your consent to do so. This service involves generating pseudonymous usage profiles and using cookies. The information generated by the cookie about your use of our website – such as the browser type/version and operating system you are using, the referrer URL (the URL of the website you have just come from), the host name of the device you are using to access our website (IP address) and the time of the server request – is normally transmitted to a Google server in the USA and stored there.

IP anonymization

If, however, IP anonymization is activated, as it is on our website, your IP address will be truncated by Google before it is transmitted if you are in a member state of the European Union or another country covered by the European Economic Area Agreement. In exceptional cases only, the full IP address will be sent to a Google server in the USA and truncated there. Google will use this information on our behalf to analyze usage of our website, generate reports about website activity, and provide us with further services relating to website use and internet use. We will utilize these services for market research purposes and to enable us to optimize our website to meet users’ needs. This information may also be passed on to third parties if this is prescribed by law or if third parties are processing this data on our behalf. Under no circumstances will your IP address be combined with other Google data. IP addresses are anonymized before data is processed, so the data cannot be associated with you (IP masking).

Even after you have given your consent, you can prevent cookies from being stored on your device by adjusting the appropriate setting in your browser software. Please note, however, that if you choose to opt out, you may not be able to make full use of all the functions on our website.

You can also prevent the data generated by the cookie and relating to your use of our website (including your IP address) from being shared with and processed by Google. To do this, you need to download and install the browser add-on that is available at the link specified below.

The current link is:

https://tools.google.com/dlpage/gaoptout?hl=en

Alternativ verhindern Sie mit einem Klick auf diesen Link, dass Google Analytics innerhalb dieser Website Daten über Sie erfasst. Mit dem Klick auf obigen Link laden Sie ein „Opt-Out-Cookie“ herunter. Ihr Browser muss die Speicherung von Cookies also hierzu grundsätzlich erlauben. Löschen Sie Ihre Cookies regelmäßig, ist ein erneuter Klick auf den Link bei jedem Besuch dieser Website vonnöten.

Data processing agreement and standard contractual clauses

We have entered into a data processing agreement with Google, as well as an additional agreement to include the standard contractual clauses approved by the European Commission for the transfer of personal data to third countries for processing. We also fully implement the strict requirements specified by the responsible data protection authorities when using Google Analytics.

Further information about how your data is safeguarded in connection with Google Analytics is also available on the Google Analytics help page:

(https://support.google.com/analytics/answer/6004245?hl=en).

8. Rights of the data subject

You have the following rights:

• The right to access your personal data that we are processing, and information relating to that data, in accordance with Article 15 GDPR. In particular, you can obtain information from us about the purposes of the processing, the categories of personal data concerned, the categories of recipient to whom your data has been or will be disclosed, the envisaged period for which the data will be stored, the existence of the right to request rectification or erasure of the personal data or restriction of its processing or to object to such processing, the right to lodge a complaint, the source of the data if this was not collected by us, and about the existence of automated decision-making, including profiling, and meaningful information about the details involved where applicable.
• The right to obtain, without undue delay, the rectification of inaccurate personal data we are storing or the completion of incomplete personal data, in accordance with Article 16 GDPR.
• The right to obtain the erasure of your personal data that we are storing, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims, in accordance with Article 17 GDPR.
• The right to obtain restriction of processing of your personal data if the accuracy of the data is contested by you, if the processing is unlawful, but you oppose the erasure of the data, if we no longer need the data, but you require it for the establishment, exercise or defense of legal claims, in accordance with Article 18 GDPR, or if you have objected to the processing of the data in accordance with Article 21 GDPR.
• The right to receive the personal data that you have provided to us, in a structured, commonly used and machine-readable format, or to transmit this data to another controller, in accordance with Article 20 GDPR.
• The right to withdraw your consent at any time, in accordance with Article 7 (3) GDPR; this means that, in the future, we will not be able to continue with the data processing that was based on this consent.
• The right to lodge a complaint with a supervisory authority, in accordance with Article 77 GDPR; you can normally do this by contacting the relevant supervisory authority for your usual place of residence or for our company headquarters.

9. Right to object

Insofar as your personal data is processed on the basis of legitimate interests in accordance with Article 6 (1f) GDPR, you have the right, as set out in Article 21 GDPR, to object to the processing of your personal data, provided that this objection is on grounds relating to your particular situation or applies to the processing of your data for direct marketing purposes. In the latter case, you have a general right to object, without stating the details of your particular situation, and we will stop processing your data accordingly.
You can exert your right to withdraw your consent or your right to object by simply sending an email to office@linklegal.de.

10. Data security

We use Transport Layer Security (TLS) – more commonly known by its previous name, Secure Sockets Layer (SSL) – on our website as a hybrid encryption protocol for the secure transmission of data over the internet, in combination with the highest security level supported by your browser. This generally involves 256 bit encryption. If your browser does not support 256 bit encryption, we use 128 bit v3 technology instead. When an individual page or subpage of our website is being transmitted in encrypted form, a closed padlock or key symbol will appear in your browser’s status bar. We also take appropriate technical and organizational security measures to protect your data against accidental manipulation, deliberate tampering, partial or complete loss or destruction, and unauthorized access by third parties.