Privacy Policy

I. Information about the processing of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR)

1.controller and data protection officer

Iris Lanz, Aschaffenburger Str. 6, 10779 Berlin,030-2186807, lanz@irislanz.com is responsible for this website (also data protection officer).

2. a. b. c. Data processed for the provision of the website and the creation of log files are processed

What data is processed for what purpose?
Every time the content of the website is accessed, data is temporarily stored that possibl yallow identification. The following data is collected
:- Date and time of access
- IP address
- Host name of the accessing computer
- Website from which the website was accessed
- Websites accessed via the website
- Visited page on our website
- Message as to whether the retrieval was successful
- Amount of data transferred
-Information about the browser type and version used
- Operating system
The temporary storage of the data is necessary for the course of a website visit in order to enable the website to be delivered. Further storage in log files takes place in order to ensure the functionality of the website and the security of the information technology systems. Our legitimate interest in data processing also lies in these purposes.
On what legal basis is this data processed?
The data is processed on the basis of Article 6(1)(f) GDPR.
Are there other recipients of the personal data in addition to the controller?
The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (herein after referred to as IONOS). When you visit our website, IONOS collects various logfiles including your IP addresses. For details, please refer to the IONOS privacy policy: https://www.ionos.de/terms-gtc/terms-privacy. IONOS isused on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in displaying our website as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
Order processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Webflow
The provider is Webflow, Inc, 398 11th Street, 2nd Floor, San Francisco, CA 94103,USA (herein after referred to as Webflow). When you visit our website, Webflow collects various log files including your IP addresses. Webflow is a tool for creating and hosting websites. Webflow stores cookies or other recognition technologies that are required to display the page, to provide certain website functions and to ensure security (necessary cookies).Details can be found in Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy.Webflow is used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in displaying our website as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.Datatransfer to the USA is based on the standard contractual clauses of the EU Commission.Details can be found here:https://webflow.com/legal/eu-privacy-policy. The company is certified in accordance with the “EU-US Data Privacy Framework”(DPF).  Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/6365.The hoster receives the above-mentioned data as a processor.

2. d. How long will the data be stored?

The data isdeleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the provision of the website, this is the casewhen the respective session has ended. The log files are stored directly and only accessible to administrators. After that, they are only availableindirectly via the reconstruction of backup tapes and are permanently deleted after a maximum of four weeks.

3. rights of data subjects

a. Right to information
You can request information in accordance with Art. 15 GDPR about your personal data that we process.
b. Right to object
You have the right to object for specific reasons (see point II).
c. Right to rectification
If the information concerning you is not (or no longer) correct, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
d. Right to erasure
You can request the erasure of your personal data in accordance with Art. 17 GDPR.
e. Right to restriction of processing
In accordance with Art. 18 GDPR, you have the right to request that the processing of your personal data be restricted.
f. Right to lodge a complaint
If you are of the opinion that the processing of your personal data violates data protection law, you have the following rights under Art. 77 para. 1 GDPR the right to lodge a complaint with a data protection supervisory authority of their choice. This also includes the data protection supervisory authority responsible for the controller: Berlin Commissioner for Data Protection and Freedom of Information.
g. Right to data portability
In the event that the requirements of Art. 20 para. 1 GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website. They are therefore not based on consent pursuant to Art. 6(1)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, but are justified pursuant to Art. 6(1)(f) GDPR. The requirements of Art. 20 (1) GDPR are therefore not met in this respect.

II. Right to object pursuant to Art. 21 (1) GDPR

You have the right to object, on grounds relating to your particular situation, at anytime to processing of your personal data which is based on point (f) of Article 6(1) GDPR. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the assertion, exercise or defense of legal claims. The collection of data for the provision of the website and the storage of logfiles are absolutely necessary for the operation of the website.
Iris Lanz, Aschaffenburger Str. 6, 10779 Berlin,030-2186807, lanz@irislanz.com Iris responsible for this website (also data protection officer).