Privacy policy

General information

The following information gives you a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. You can find detailed information about data protection in the privacy policy below.

Data collection on this website

Who is responsible for collecting data on this website?

Data on this website is processed by the website operator. You can find the operator's contact details in the “Controller” section of this privacy policy.

How do we collect your data?

We collect some data when you provide it to us, for example by entering it into a contact form. Other data is collected automatically, or with your consent, by our IT systems when you visit the website. This mainly includes technical data such as your browser, operating system and the time you accessed a page. This data is collected as soon as you enter the website.

What do we use your data for?

Some data is collected to ensure that the website works correctly. Other data may be used to analyse how visitors use the website. If contracts can be concluded or initiated through the website, submitted data is also processed for offers, orders and other enquiries.

What rights do you have concerning your data?

You can request information about the origin, recipients and purpose of your stored personal data free of charge at any time. You may also request that the data be corrected or deleted. If you have consented to data processing, you may withdraw your consent at any time with effect for the future. Under certain circumstances, you may also request that the processing of your personal data be restricted. You have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time about these or other data protection questions.

Analytics and third-party tools

When you visit this website, your browsing behaviour may be analysed statistically, mainly using analytics software. Further information is provided below.

Analysis with self-hosted Umami Analytics

We use the open-source tool Umami Analytics to analyse website usage statistically and improve our website's technical performance.

Technical implementation and hosting

We host Umami ourselves on our own server infrastructure. Analytics data is not sent to an external analytics provider.

Data protection and anonymisation

Umami Analytics is designed to minimise data collection:

  • No cookies: The software does not use cookies or store information on your device.
  • Anonymisation: Your IP address is processed to determine general location data and create an anonymised session identifier, but the IP address is not stored.
  • No personal profiles: No user profiles are created and data is not analysed for advertising purposes.
  • Reach and performance data: We record data including page views, referrers, browser, operating system, device type, approximate location and technical website performance values.

Heatmaps and session recordings

To improve the usability of our website, we record a sample of sessions and create heatmaps. Mouse movements, clicks, scrolling, page changes and form interactions may be recorded. Input field contents are masked. Recordings are linked to individual anonymised sessions and deleted after 30 days.

Legal basis

Processing is based on our legitimate interest in designing a website that meets users' needs, functions correctly and allows us to measure reach, in accordance with Art. 6(1)(f) GDPR.

2. Hosting

We host the contents of this website with the following provider:

External hosting

This website is hosted externally. Personal data collected on this website is stored on the servers of the hosting provider. This may include IP addresses, contact requests, metadata and communications data, contract data, contact details, names, website access data and other data generated through a website.

External hosting serves the performance of contracts with prospective and existing customers (Art. 6(1)(b) GDPR) and our interest in providing a secure, fast and efficient online service through a professional provider (Art. 6(1)(f) GDPR). Where consent has been requested, processing is based solely on Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers storing cookies or accessing information on the user's device, such as device fingerprinting. Consent can be withdrawn at any time.

Our hosting provider processes your data only to the extent necessary to fulfil its obligations and follows our instructions regarding that data.

We use the following hosting provider:

netcup GmbH
Emmy-Noether-Str. 10
76131 Karlsruhe
Germany

Data processing agreement

We have concluded a data processing agreement with the provider named above. This agreement is required by data protection law and ensures that the provider processes our visitors' personal data only according to our instructions and in compliance with the GDPR.

3. General information and mandatory disclosures

Data protection

We take the protection of your personal data very seriously. We treat it confidentially and in accordance with applicable data protection law and this privacy policy.

When you use this website, various items of personal data are collected. Personal data is data that can be used to identify you personally. This policy explains what data we collect, how and why we use it.

Please note that transmitting data over the internet, for example by email, may have security vulnerabilities. Complete protection against access by third parties is not possible.

Controller

The controller responsible for data processing on this website is:

Gebr. Fussenegger GbR
Managing directors: Martin and Thomas Fussenegger
König-Ludwig-Straße 12
87645 Schwangau
Germany

Telephone: 08362 9239050
Email: info@schreinerwirt-schwangau.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data such as names or email addresses.

Storage period

Unless a more specific storage period is stated in this policy, we retain your personal data until the purpose of processing no longer applies. If you make a valid deletion request or withdraw your consent, your data will be deleted unless another legally permissible reason requires us to keep it, such as tax or commercial retention periods. In that case it will be deleted when that reason no longer applies.

Legal bases for data processing on this website

If you have consented to processing, we process your personal data under Art. 6(1)(a) GDPR or, for special categories of data under Art. 9(1) GDPR, Art. 9(2)(a) GDPR. Explicit consent to transfer personal data to third countries also provides a basis under Art. 49(1)(a) GDPR. If you have consented to storing cookies or accessing information on your device, Section 25(1) TDDDG also applies. You may withdraw consent at any time. Where your data is needed to perform a contract or take steps before entering one, processing is based on Art. 6(1)(b) GDPR. Processing needed to meet a legal obligation is based on Art. 6(1)(c) GDPR. Processing may also be based on our legitimate interests under Art. 6(1)(f) GDPR. The applicable legal bases for specific processing activities are described below.

Recipients of personal data

We work with various external parties in the course of our business. We disclose personal data to them only when necessary to perform a contract, when required by law, for example to tax authorities, when we have a legitimate interest under Art. 6(1)(f) GDPR, or when another legal basis permits disclosure. We share customer data with processors only under a valid data processing agreement. Joint processing is governed by a joint-controller agreement.

Withdrawal of consent

Many processing activities are possible only with your express consent. You may withdraw consent already given at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

Right to object in individual cases and to direct marketing (Art. 21 GDPR)

IF PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU MAY OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE LEGAL BASIS FOR EACH PROCESSING ACTIVITY IS SET OUT IN THIS POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR PROCESSING IS NECESSARY TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU MAY OBJECT AT ANY TIME TO THAT PROCESSING, INCLUDING RELATED PROFILING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (ART. 21(2) GDPR).

Right to lodge a complaint with a supervisory authority

If the GDPR has been infringed, you may lodge a complaint with a supervisory authority, particularly in the member state of your usual residence, workplace or the place of the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or to perform a contract in a commonly used, machine-readable format, or have it handed to a third party. Direct transfer to another controller will take place only where technically feasible.

Access, rectification and erasure

Under applicable law, you may request free information about your stored personal data, its origin, recipients and the purpose of processing at any time. You may also have the right to have this data corrected or deleted. Please contact us about these or any other questions concerning personal data.

Right to restriction of processing

You may request restriction of the processing of your personal data. This right applies in the following cases:

  • If you dispute the accuracy of data we hold, we generally need time to check it. You may request restriction while we do so.
  • If processing was or is unlawful, you may request restriction instead of erasure.
  • If we no longer need your data but you need it to establish, exercise or defend legal claims, you may request restriction instead of erasure.
  • If you have objected under Art. 21(1) GDPR, your interests and ours must be weighed. You may request restriction until it is determined whose interests prevail.

Where processing has been restricted, apart from storage, the data may be processed only with your consent, to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for important public interest reasons of the European Union or a member state.

Objection to unsolicited advertising emails

We object to the use of contact details published to meet legal notice requirements for sending unsolicited advertising or information. We expressly reserve the right to take legal action against unsolicited advertising, including spam emails.

4. Data collection on this website

Cookies

Our websites use “cookies”, small data packages that do not harm your device. They are stored either temporarily for a session or permanently. Session cookies are deleted automatically when you leave; permanent cookies remain until you delete them or your browser deletes them automatically.

Cookies may come from us (first-party cookies) or from other companies (third-party cookies). Third-party cookies enable certain external services to be integrated into websites, such as payment services.

Cookies have different functions. Many are technically necessary because some website features, such as shopping baskets or video displays, would otherwise not work. Others may be used to analyse user behaviour or for advertising.

Cookies needed for electronic communication, features you request or website optimisation are stored under Art. 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in technically sound and optimised service delivery. Where consent to cookies or comparable recognition technologies has been requested, processing is based solely on that consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). Consent can be withdrawn at any time.

You can set your browser to notify you when cookies are set, permit them only in individual cases, reject them in certain cases or generally, and delete them automatically when you close the browser. Disabling cookies may limit website functionality.

Any other cookies or services used on this website are described in this policy.

Server log files

The provider automatically collects and stores information transmitted by your browser in server log files:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not combined with other data sources. It is collected under Art. 6(1)(f) GDPR. The website operator has a legitimate interest in correct technical presentation and optimisation of the website, for which server log files are needed.

Contact form

If you send us enquiries through a contact form, we store the information you enter, including your contact details, to process the enquiry and answer follow-up questions. We do not disclose this data without your consent.

Where your enquiry relates to a contract or pre-contractual steps, processing is based on Art. 6(1)(b) GDPR. Otherwise it is based on our legitimate interest in handling enquiries effectively (Art. 6(1)(f) GDPR), or on your consent (Art. 6(1)(a) GDPR) where requested. You may withdraw consent at any time.

We retain contact-form data until you ask us to delete it, withdraw your consent to storage or the purpose of storage no longer applies, for example after your enquiry has been resolved. Mandatory legal provisions, particularly retention periods, remain unaffected.

Enquiries by email, telephone or fax

If you contact us by email, telephone or fax, we store and process your enquiry, including any resulting personal data such as your name and the enquiry itself, to deal with your request. We do not disclose this data without your consent.

Where your enquiry relates to a contract or pre-contractual steps, processing is based on Art. 6(1)(b) GDPR. Otherwise it is based on our legitimate interest in handling enquiries effectively (Art. 6(1)(f) GDPR), or on your consent (Art. 6(1)(a) GDPR) where requested. You may withdraw consent at any time.

We retain data sent with contact enquiries until you ask us to delete it, withdraw your consent to storage or the purpose of storage no longer applies, for example after your enquiry has been resolved. Mandatory legal provisions, particularly retention periods, remain unaffected.

Source: https://www.e-recht24.de