user_mobilelogo

Privacy Policy & Disclaimer


We welcome you to our website!

We appreciate your interest and would like to make your stay on our website as pleasant as possible. For us, this also includes responsible handling of your data, which complies with all legal requirements in Germany. Basis are the regulations of the basic data protection regulation (GDPR).
In the following, we will inform you about the handling of your personal data by us and the rights and rights you are entitled to according to the data protection regulations of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR).

This Privacy Notice applies to the website we offer you. Should offers from other providers ("third-party offers") be available from our website, the privacy policy for these third-party offers will not apply. In this case, we are also not responsible for the processing of your personal data in the context of such third-party offers i.S.v. Art. 4 No. 7 GDPR.

Additional privacy notices for customers and interested parties

With the following data protection notices we inform our customers and prospective customers according to the EU basic data protection ordinance (EU-GDPR) starting from the 25. May 2018 about the processing and use of your personal data in the context of our offered services as well as their rights.

Privacy policy for customers

Privacy policy for interested parties

  
1. Who is responsible for data processing and to whom can I contact (Art. 4 No. 7 GDPR)?

Responsible body

Steinburger Hof
Steinburg 32
94336 Hunderdorf
This email address is being protected from spambots. You need JavaScript enabled to view it.

 

Stephan Weckmann
This email address is being protected from spambots. You need JavaScript enabled to view it.


 
Contact person for privacy issues

Steinburger Hof
Steinburg 32
94336 Hunderdorf
This email address is being protected from spambots. You need JavaScript enabled to view it.

Stephan Weckmann
This email address is being protected from spambots. You need JavaScript enabled to view it.

 

2. Which sources and data do we use?

Surfing the site
You can visit our website without telling us who you are. We will then only know the IP address. This is transmitted on every server request so that the server knows where to send the response. Everyone receives the IP address from an Internet Service Provider (ISP) as soon as they connect to the Internet. The ISP can understand which IP address was assigned to which of its customers at which time. As long as the IP address is stored, the ID of the ISP can theoretically determine the identity of the connection owner. We store the IP address only in abbreviated (anonymous) form and use it only for session recognition, for geolocation (down to city level). The IP address is then immediately deleted, so that the collected data is anonymous and even over the detour of the ISP no assignment to the identity of the user is possible.

The data is used exclusively for the administration and optimization of the website.

We only evaluate the IP address when it attacks its Internet infrastructure. In this case, we have a legitimate interest i.S.v. Art. 6 para. 1 f) of the DSGVO on the processing of the IP address. This legitimate interest arises from the need to ward off the attack on the Internet infrastructure, to determine the origin of the attack in order to be able to prosecute the responsible person under criminal and civil law, as well as effectively prevent further attacks.

Use of cookies
Our website uses cookies in several places. They serve to make the offer more user-friendly and effective. Cookies are small text files that are stored on your computer and stored by your browser. The cookies can not be assigned to specific persons and contain no personal data. A merge of this data with other data sources will not be done. Most of the cookies we use are so-called "session cookies", which are deleted when you end your browser session. In addition, there are some long-lasting cookies by which we recognize you as a visitor again. Cookies do not harm your computer and do not contain viruses.

The following cookies are set:

 

• session cookie (for session detection, lifetime: one session)
• Ever-Cookie (to recognize new / regular customers, lifetime: 6 months)

Some cookies are subject to approval, others are not. All cookies that require your explicit consent are disabled when you visit the site. Only if you have agreed to the cookie notice at the bottom of the screen are these cookies enabled.

For the non-consenting cookies, the collected data of the users are pseudonymised by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data will not be stored together with other personal data of the users.

The legal basis for the processing of personal data using the cookies classified as non-consenting in the following is Article 6 (1) lit. f GDPR.

Some browsers already allow cookies by default. If you do not want them, you can change the setting of your browser. How to do this, please refer to the specifications of the browser manufacturer. If you decide against cookies, it may happen that parts of our website can not be used.

Tracking and web analysis services
- non-approved cookies

Google Analytics

As part of your website visit, some statistical information about the website is collected and evaluated by your browser.
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google").

 

Google Analytics uses "cookies". The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. This website uses Google Analytics with the extension "_anonymizeIp ()". This will truncate Google's IP addresses within member states of the European Union or other parties to the Agreement on the European Economic Area. A direct personal relationship in the context of further processing can thus be excluded. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website usage and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.

Our user analysis also uses Universal Analytics. This allows us to obtain information about the use of our offers on different devices ("Cross Device"). We use a pseudonymised user ID using the cookie technology, which contains no personal data and does not transmit such data to Google.
Further information about Universal Analytics can be found here:

https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376

You can prevent the storage of cookies by a corresponding setting of your browser software. Please note that in this case you may not be able to use all the functions of this website to the full extent.

In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by using the browser plug-in available under the following link. in download and install:

http://tools.google.com/dlpage/gaoptout?hl=de.

Another option to prevent detection by Google Analytics is that you click on the following link. This will set an opt-out cookie on your device that will prevent future collection of your data when you visit this website: disable Google Analytics. If you delete your cookies in this browser, you must click this link again. The use of Google Analytics is in accordance with the conditions agreed by the German data protection authorities with Google.


Please see http://www.google.com/analytics/terms/en.html for more information about Google Analytics terms of service and privacy or https://www.google.com/intl/en/policies/. Please note that on this website Google Analytics has been extended by the code "_anonymizeIp ()" in order to ensure an anonymous collection of IP addresses (so-called IP-Masking).

Third-party information:

Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Terms of Use: http://www.google.com/analytics/terms/en.html

Privacy Policy: http://www.google.com/intl/en/analytics/learn/privacy.html,
and the privacy policy: http://www.google.com/intl/en/policies/privacy.

 

The following data is collected:

• Request (file name of the requested file)
• Browser type / version
• Browser language
• used operating system
• internal resolution of the browser window
• Screen resolution
• Javascript activation
• Java on / off
• Cookies on / off
• Color depth
• Referrer URL (the previously visited page)
• Shortened IP address for geographic analysis down to the city level
• Time of access
• Clicks

 

- Cookies subject to approval

Google Analytics Advertising Features

We also use Google Analytics to analyze data from AdWords for statistical purposes. If you do not want to do this, you can disable it through the Ads Preferences Manager https://www.google.com/settings/ads/onweb/?hl=en.

In addition, the following Google Analytics advertising features are enabled:

• Remarketing with Google Analytics
• Google Analytics demographics and interest reports
As a result, in addition to the data collected by the standard implementation of Google Analytics, Google Analytics will collect additional access data through Google's ad serving and anonymous identifier cookies.

Again, the already mentioned opt-out options are available.

Third-party information:

Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Terms of Use: http://www.google.com/analytics/terms/en.html

Privacy Policy: http://www.google.com/intl/en/analytics/learn/privacy.html,

and the privacy policy: http://www.google.com/intl/en/policies/privacy.

 

Contact form and communication

On some pages you can enter the personal data provided there for the purpose of correspondence with us in input fields.

If you take this opportunity, the data entered in the input mask will be transmitted to us and stored. At the time of sending the message will be
In addition, the following data is stored:

• the IP address of the user
• Date and Time
For the processing of the data in the context of the sending process your consent is obtained and referred to this privacy statement.

Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored.

The data will be processed only for this correspondence with you and for the purpose for which you have given us the data in the course of this communication, such as to process your requests or to contact you at your request.

In this case, the processing of personal data takes place with your consent (Article 6 (1) a) GDPR).

We will delete your relevant data if the purpose for which you have provided us with your data is fulfilled or done and we are not entitled or obliged to store it for legal reasons.


customer account

If you register as a customer on our website, or let us create a customer account, you are in a protected area for customers. Customers can register there by providing an e-mail address. The e-mail address is only saved for the purpose of the login. A disclosure to third parties does not occur. Also, as part of the web tracking (see above) no customer data transmitted. At the time of registration, the date and time of registration will be saved. After registration, only the last login will be saved.

A customer account is an additional service from us. Legal basis for the processing of the data is due to the consent of the user Art. 6 para. 1 lit. a GDPR.

The processing of the data for the respective registration also serves the fulfillment of a contract of which the user is a party or the implementation of pre-contractual measures. Therefore, for the registration process additional legal basis for the processing of the necessary data Art. 6 para. 1 lit. b GDPR.

The data required for the registration will be deleted as soon as they are no longer necessary for the purpose of their collection. This is the case for the during the registration process to fulfill a contract or to carry out pre-contractual measures then the case, when the data for the execution of the contract ceases to exist
required are. Even after the conclusion of the contract, there may be a need to store personal data of the contracting party in order to comply with contractual or legal obligations.

 

Newsletter

You have the opportunity to subscribe to our newsletter via our website. For this we need your e-mail address and your declaration that you agree to receive the newsletter.

Once you have subscribed to the newsletter, we will send you a confirmation email with a link to confirm your registration (double opt-in).

You can cancel the subscription to the newsletter at any time. A corresponding unsubscribe link is included in each newsletter below in the imprint. We will immediately delete your data in connection with the newsletter dispatch.

Calculator functions and calculation results

For temporarily limited actions, we offer the use of so-called computers, with which you can get to know offers such as financing / leasing. As a rule, no personal data is necessary for the use of these applications.

Some of the data requested are marked as mandatory because they are required for contacting and applying online for building society savings. The data will not be transmitted by us to third parties or brought to third parties in any other way. As far as we in this context your personal data to a partner
This is only based on your consent and is therefore permissible under Art. 6 (1) (a) GDPR. An automated profiling by us due to your behavior or other information does not take place.


Information applications from other providers

In addition, information applications (eg live chat) provided by third parties ("partners") are integrated on our website The applications are hosted on the partners' servers and operated by these partners Personal data is only processed to the extent that Please note that the use of such an application is subject to the data protection provisions of the respective partner stored there, the person responsible for this processing within the meaning of Art. 4 No. 7 GDPR As far as we provide your personal data in this context
Partner, this is only on the basis of your consent and is therefore permitted under Article 6 paragraph 1 a) GDPR.

In live chat, we offer you the opportunity to request information and appointments with our employees about our products and services. For some of these requests, we kindly ask you to provide us with personal information, otherwise the request will not be processed properly. The purpose of the data we will inform you in
respective relationship with the request with.

The text of the chat will be deleted automatically after completion. As a user, you have the option to download a call log at the end of the dialog. For statistical purposes, the topic, duration and timing of the conversation are recorded anonymously. A transfer of data to third parties does not take place.

 

Google Maps

In the contact search we use the map service provider Google Maps. It offers you location-based services and features that may require the use of your location data. For example, if you use a location-based search at your location or request map data, your location data may be forwarded to Google Maps to provide you with appropriate content. To provide you with location-based services and features, Google Maps uses satellites, Wi-Fi networks, or other network-based location information. Google Maps products can use a variety of device platforms, applications, and services that can also track your location data. Read more about the privacy policy of Google Maps here:

https://policies.google.com/privacy?hl=de


Social networks

On our website we use links to the social networks Facebook and Google+ and the microblogging service Twitter as well as the Youtube. Via these links you will be forwarded directly to the respective provider.

Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").

Google+ is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").

Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter").

Youtube is a service of Google Inc., San Bruno / California, USA. 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").

 

Only when you use these links does your browser connect directly to the providers' servers. The content is then transmitted by the associated provider directly to your browser and integrated into the page. Thus, the providers receive the information that your browser has accessed the corresponding page of our Internet presence, even if you do not have a profile with the appropriate provider or just not logged in to the service of the respective provider. This information (including your IP address) is transmitted by your browser directly to a server of the respective provider, possibly to the USA and stored there.

If you are logged in to one of the providers' services, the providers can immediately allocate the visit to our website to your profile / account of the respective provider. If you interact with the websites of the providers, for example the "Like" button, the "+1" button or the "Tweet" button, the corresponding information is also transmitted directly to a server of the provider and stored there , The information will also be published on the social network or on your social media account and displayed there to your contacts. Purpose and scope of the data collection and the further processing and use of the data by the provider as well as your rights and options to protect your
Privacy, please refer to the privacy policy of the provider:

 

Facebook [https://www.facebook.com/policy.php]

Google+ [https://www.google.com/intl/en/policies/privacy/]

Twitter [https://twitter.com/en/privacy]

Youtube [https://www.google.com/intl/en/policies/privacy/]


If you do not want the providers, the data collected via our website immediately assign your profile / account in the service, you must first log out of the corresponding service.

 

3. For what do we process your data (purpose of the processing) and on which legal basis?

We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG):

- For the fulfillment of contractual obligations (Article 6 (1b) GDPR)

Your data will be used to carry out our contracts with you, i. For example, processed to execute and / or manage your orders. The purposes of data processing are based on the specific product and the contract documents. This also applies to processing operations required to carry out pre-contractual actions.

- In the context of balancing of interests (Article 6 (1f) GDPR)

If necessary, we process your data beyond the actual fulfillment of a contract concluded with you or a consent granted by you for the protection of legitimate interests of us or third parties, unless a balance in individual cases shows that your legitimate rights and freedoms, the protection of personal Require data, predominate (see Article 6 para 1f GDPR). These include, for example:

• Review and optimization of needs analysis and direct customer approach procedures;
• advertising or market and opinion research, provided that they have not objected to the use of your data;
• measures to further develop services and products;
• asserting legal claims and defense in legal disputes;
• ensuring IT security and IT operations;
• Prevention and investigation of criminal offenses.

- On the basis of your consent (Article 6 (1a) GDPR)

 

Any further processing of your personal data will only be carried out if you have given us your consent and in accordance with this. Art. 6 para. 1 a) GDPR are entitled to process your personal data. In some areas of our website, you have the opportunity to grant such express consent. In doing so, we will inform you of the purpose for which the data will be processed in the case of your consent and how long we will store this personal data.

Further information on data processing based on the given consent can be found under the following points:

-> paragraph 2
   -> Cookies subject to approval
   -> contact and communication
   -> Newsletter
   -> Calculator function and calculation results

Insofar as you have given us consent to the processing of personal data for specific purposes (eg, disclosure of data within the Verbund / Group, analysis of data for marketing purposes), the legality of this processing is based on your consent. A given consent can be revoked at any time. This also applies to the revocation of declarations of consent, which were issued to us before the validity of the GDPR, ie before May 25, 2018. Please note that the revocation only works for the future. Processing that occurred before the revocation is not affected.

- Due to legal requirements (Article 6 (1c) GDPR) or in the public interest (Article 6 (1) (e) GDPR)

 
Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation
(DSGVO) as the legal basis for the processing of personal data. In the processing of personal data required to fulfill a contract, DSGVO as legal basis. This also applies to processing operations required to carry out pre-contractual actions. Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, Art. 6 para. 1 lit. c
DSGVO as legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d DSGVO as legal basis. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 para. 1 lit. f DSGVO as legal basis for processing.
 

  
4. Who gets my data?

Within our group, those jobs will receive your data, which they need for the administration and optimization of the Internet offer, as well as those who are responsible for answering your inquiries. Please read the details in section 2.

We only evaluate the IP address when it attacks its Internet infrastructure. In this case, we have a legitimate interest iSv. Art. 6 para. 1 f) of the GDPR on the processing of the IP address. This legitimate interest arises from the need to ward off the attack on the Internet infrastructure, to determine the origin of the attack in order to be able to prosecute the responsible person under criminal and civil law, as well as effectively prevent further attacks. In this case, security personnel will gain access to your IP.


With regard to the transfer of data to third parties, it should first be noted that we are bound to secrecy about all customer-related facts and assessments from which we gain knowledge. We may only disclose information about you if legal provisions permit or require it, if you have given your consent or if we are authorized to provide information.

 

5. How long will my data be stored?

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract. For more information on the duration of data storage, please refer to the individual applications and tools used in our Internet offer, see section 2 above.

If you have a personal customer account on our website, the following applies:

If necessary, we process and store your personal data for the duration of our business relationship, which includes, for example, the initiation and execution of a contract. It should be noted that our business relationship is a permanent debt, which is designed for years.

In addition, we are subject to various storage and documentation obligations, which result from the German Commercial Code (HGB), the German Tax Code (AO), the German Banking Act (KWG) and the Money Laundering Act (GwG). The deadlines for storage and documentation specified there begin with the termination of the contract and amount to five to ten years.

  

6. Are data transmitted to a third country or to an international organization?

Your data will only be transmitted to countries outside the European Economic Area - EEA (Third Countries), as far as necessary for the execution of your inquiries or orders required or required by law or you have given your consent.

In the context of the remote maintenance of standard IT components, it can not be ruled out in individual cases that a third-party IT service provider (for example, the USA) may in rare cases gain controlled and limited access to personal data. Details will be provided to you separately, if required by law.

For individual applications, please refer to section 2 for further information on data transmission to third countries.

There are no transfers of personal data to an international organization.

 

7. What privacy rights do I have?

Each data subject has the right to information under Art. 15 GDPR, the right of correction under Art. 16 GDPR, the right to cancellation under Art. 17 GDPR  the right to restriction of processing under Art. 18 GDPR and the law on data portability from Art. 20 GDPR  With regard to the right to information and the right to erase, the restrictions under §§ 34 and 35 BDSG apply. In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR i.V.m. § 19 BDSG).


  
8. Is there an obligation for me to provide data?

If you have a request (eg consultation request, information request or newsletter), you only have to provide us with the data required for contacting us.

As far as you want to use the login area of ​​your customer account, the following applies:

To register and use the online service portal, you only need to provide the data required for registration / registration (e-mail address).

  

9. To what extent is there automated decision-making in individual cases?

In principle, we do not use fully automated decision-making in accordance with Art. 22 GDPR to justify and implement the business relationship. If we use these procedures in individual cases, we will inform you about this separately.

  

10. To what extent are my data used for profiling (scoring)?

We sometimes process your data automatically with the aim of evaluating certain personal aspects (profiling). For example, we use evaluation tools to provide you with targeted information and advice on products. These enable needs-based communication and advertising, including market and opinion research.


  
11. Updating of this Privacy Policy

From time to time, an update of this privacy policy may be necessary, for example, by new legal or regulatory requirements and new offers on our website. We will inform you at this point. In general, we recommend that you visit this Privacy Notice periodically to see if there have been any changes. Among other things, you can see whether any changes have been made by updating the status at the bottom of this document.

 

12. Printing and saving this privacy policy

This privacy policy can be printed and saved directly, for example by the print or save function in your browser.

 


  
Information about your right to object according to Art. 21 General Data Protection Regulation

You have the right at any time, for reasons arising out of your particular situation, to prevent the processing of personal data relating to you which, pursuant to Art. 6 (1e) DSGVO (Data Processing in the Public Interest) and Art. 6 (1f) GDPR ( Data processing on the basis of a balance of interests) takes place, objecting; this also applies to a profiling based on this provision within the meaning of Art. 4 No. 4 GDPR, which we use for rating purposes or for advertising purposes. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims.

In individual cases, we process your personal data in order to operate direct mail. You have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is associated with such direct mail.
If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.

The objection can be free of form and should be directed as far as possible to:

Steinburger Hof
Steinburg 32
94336 Hunderdorf
This email address is being protected from spambots. You need JavaScript enabled to view it.

Stephan Weckmann
This email address is being protected from spambots. You need JavaScript enabled to view it.

 

Who is responsible for data processing and who can I contact?


Responsible body:

Steinburger Hof
Steinburg 32
94336 Hunderdorf
This email address is being protected from spambots. You need JavaScript enabled to view it.

Stephan Weckmann
This email address is being protected from spambots. You need JavaScript enabled to view it.

Contact for privacy issues:

Steinburger Hof
Steinburg 32
94336 Hunderdorf
This email address is being protected from spambots. You need JavaScript enabled to view it.

Stephan Weckmann
This email address is being protected from spambots. You need JavaScript enabled to view it.

 

Disclaimer

Our offer contains links to external websites of third parties on whose contents we have no influence. Therefore, we can not assume any liability for these external contents. The respective provider or operator of the pages is always responsible for the contents of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal content was not recognizable at the time of linking. However, a permanent content control of the linked pages is not reasonable without concrete evidence of an infringement. When we become aware of violations, we will remove such links immediately.
copyright

The content and works on these pages created by the site operators are subject to German copyright law. Third party contributions are marked as such. The reproduction, processing, distribution and any kind of exploitation outside the limits of copyright require the written consent of the respective author or creator. Downloads and copies of this site are for private, non-commercial use only.


copyrights

The operators of the pages endeavor to always observe the copyrights of others or to use self-created and license-free works.

 

We use cookies to optimize our website and to make it easier for you to use our website. By using the website, you agree in principle to the use of cookies (website functionality, anonymous user behavior, etc.). If you agree, we also share information anonymously with affiliates. See Privacy Policy.