Privacy notice

Last updated: 18.10. 2018

We are delighted that you are interested in our website. We take the protection of personal information very seriously and pay close attention to this aspect in our online activities. The processing of your personal information takes place in compliance with statutory requirements and – if necessary – based on your consent. The most important statutory basis for this is the European General Data Protection Regulation (GDPR). We also comply with all other applicable data protection legislation, in particular Germany’s Data Protection Act (Bundesdatenschutzgesetz, BDSG) .

In the following we would like to inform you in detail about the applicable legal requirements, particularly those of the GDPR, concerning the processing of your personal data when you visit our website.

1. Controller

You are on the website “moderne-drechselkunst.de”. Moderne Drechselkunst, Chemnitz is responsible (the “controller”) for data processing associated with your use of the website.

2. Visiting pages on moderne-drechselkunst.de

  • For what purposes do we process your data?
    When you visit our website, your browser contacts our web server to retrieve the pages you wish to visit. You generally do not need to register or identify yourself to use this function. However, our server uses your IP address to allocate requests and responses, which could potentially be used to identify you.

    In particular, personal data such as my IP address is transmitted to our web server as part of an HTTP/S call. This connection data is processed by my web server to allow access to the website. In some cases form data may also be processed containing data you have entered.

    In addition, the respective HTTP/S calls are logged in a log file. This file is used for technical troubleshooting as well as to block and resolve attacks on the systems. I also can utilize the already saved log files to create reports that i can use to optimize our websites. The actual analysis is always anonymous, i.e. through a pooling of call data and thus it is no longer possible to use the data to identify a person.

  • On what legal basis do we process your data?

    The legal basis of any processing of your data that takes place depends on the specific purpose of your visit:

    - When you visit our website to initiate contracts or business relationships with us, the legal basis for the processing of your data is Art. 6 para. 1 (b) GDPR (initiation or performance of a contract).
    - Also, as a general rule, processing takes place based on our legitimate interests in accordance with Art. 6 para. 1 (f) GDPR. Our legitimate interest is to operate a website for general information and communication purposes as well as to present our company.

    Processing of log files takes place as a general rule based on my legitimate interests in accordance with Art. 6 para. 1 (f) GDPR. Our legitimate interest is to protect my systems against attacks and, if necessary, to take legal action against attackers as well as to continue to develop my websites.

  • Is there an obligation for you to provide your data and what happens if you choose not to?

    It is not possible to use this website or its forms without processing your connection or form data.

  • Is your data shared with anyone? Or, who participates in the processing of my data?

    As a general rule, processing is automatic. I have access to the log files. I use these files for the above mentioned purposes and, if necessary, the data is also transmitted to external recipients (in particular law enforcement agencies to prosecute attacks).

  • How long is your data stored?

    The log files are stored for one year. All other data is deleted immediately after executing the HTTP/S call.

3. Contact form, communication by email

  • For what purposes do i process your data?
    On my site i will offer the possibility to contact me by email and/or via a contact form. In this case the information you provide is stored for the purpose of processing your contact request and for any follow-up questions. If you contact us with a request or we contact you, we also process your personal data such as your name, address, phone number and the content of the communication for the purpose of exchanging information with you

  • On what legal basis do we process your data?
    The processing of your data as part of communication via the contact form or by email takes place on the basis of Art. 6 para. 1 (b) GDPR, provided the exchange is in conjunction with the initiation or performance of a contract with you.

    For the remainder, the legal basis depends on the purpose of the exchange; Art. 6 para. 1 (f) GDPR (our legitimate interest, business correspondence or, for example, to answer requests related to data protection) will apply in most cases.

  • Is there an obligation for you to provide your data and what happens if you choose not to?
    Your are not required to provide your data. However, communication by email or via the contact form is not possible without processing your personal data.

  • Is your data shared with anyone? Or, who participates in the processing of my data?
    In general your data is not shared with anybody. In some cases, it may also be forwarded to law enforcement agencies to prosecute attacks.

  • How long is your data stored?
    Your personal data is deleted when it is no longer required for the exchange of information with you. In some cases the data may be held longer on the basis of Art. 6 para. 1 (c) GDPR in conjunction with the applicable statutory retention periods (in particular in accordance with trade, tax and revenue law). In the case of business correspondence, this is usually six to ten years after the end of the year in which it is received.

4. Cookies

At time being, no cookies are used on my web site.

5. Data security

I secure my website and other systems with up-to-date technical and organizational measures to prevent your data from being lost, destroyed, accessed, modified or disseminated by unauthorized persons. My servers use various security mechanisms and permission processes to make unauthorized access difficult. You should keep your access information secret at all times and close your browser window once you have finished communicating with moderne-drechselkunst.de. This will ensure that no one apart from you can access your personal data if you share your computer with other people.

8. Your rights

If i processes your personal data you have the following rights within the respective legal scope:

  • Right of access, especially to obtain information from the controller concerning the personal data its stores and how it is processed (Art. 15 GDPR),
  • Right to rectification of inaccurate or incomplete data (Art. 16 GDPR),
  • Right to erasure, e.g. of unlawfully processed or no longer necessary data (Art. 17 GDPR),
  • Right to restriction of processing (Art. 18 GDPR),
  • Right to data portability, provided the processing takes place based on consent or to perform a contract or by means of an automated process (Art. 20 GDPR) and
  • Right to object the processing, in particular if this takes place to safeguard the legitimate interests of the controller (Art. 21 GDPR).

If the processing is based on consent that you have provided (Art. 6 para. 1 (a) or Art. 9 para. 2 (a) GDPR), you have the right to revoke your consent at any time. This shall not affect the lawfulness of processing carried out on the basis of consent prior to your revocation.

In addition, you have the possibility of sending a complaint.