With this information, the responsible body (“We”) named in item 1 informs the user of the website (“You” or “User”) about the collection and processing of personal data in accordance with Art. 13 of the General Data Protection Regulation (DS-GVO).
For the use of Internet pages of other providers, which are referred to e.g. via links, the data protection information provided there applies.
A General information
1.1 Responsible for this website is: CoMoCo Coaching & Consulting GmbH, Pariser Platz 4a, 10117 Berlin, email@example.com
1.3 Our website is hosted by ALL-INKL.COM (www.all-inkl.com), i.e. technically provided on web servers of this web hoster. The web hoster is an order processor obligated by us according to Art. 28 DS-GVO.
2 Data subject rights
You have, if personal data is collected by us from you, as a “data subject” the following rights:
2.1 Right to information
You can request information in accordance with Art. 15 DS-GVO about your personal data that we process.
2.2 Right to object
You have a right to object on the specific grounds of Art. 21 (1) DS-GVO. We will inform you about this separately from this information under “B”.
2.3 Right to rectification
If the information concerning you is not (or is no longer) accurate, you can request a rectification in accordance with Art. 16 DS-GVO. Should your data be incomplete, you may request that it be completed.
2.4 Right to erasure
You may request the erasure of your personal data under the conditions of Art. 17 DS-GVO.
2.5 Right to restriction of processing
You have, in the cases of Art. 18 DS-GVO the right to request a restriction of the processing of your personal data (“blocking”).
2.6 Right to lodge a complaint
If you are of the opinion that the processing of your personal data violates data protection law, you have the right to lodge a complaint pursuant to Ar. 77 (1) DS- GVO, the right to complain to a data protection supervisory authority of your own choice.
2.7 Right to data portability
In the event that you have provided us with personal data pursuant to Art. 20 (1) DS-GVO, you are entitled to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to third parties in a structured, common and machine-readable format. The collection of data for the provision of the website and the storage of log files (section 3.1 below) are absolutely necessary for the operation of the website. They are therefore not based on consent pursuant to Art. 6 (1) (a) DS-GVO or on a contract pursuant to Art. 6 (1) (b) DS-GVO, but are justified pursuant to Art. 6 (1) (f) DS-GVO. Accordingly, the requirements of Art. 20 (1) DS-GVO are not met in this respect.
3 Procedure: Provision of the website and creation of log files
3.1 What data is processed for what purpose?
Whenever the content of the website is accessed, the web server of our web host, where our website is stored, temporarily collects and stores information (data) from the Internet browser of the calling computer or terminal device of the user. This data may enable identification of the user and is therefore personal data.
3.1.1 The following data is collected and stored by our web host:
- IP address of the user,
- Date and time of the call of the website,
- the protocol, e.g. HTTP,
- the request method, “Get” or “Post”,
- content to the request or indication of the retrieved file that was transmitted to the user, .
- the access status (successful transmission, error, etc),
- the amount of data transferred in each case in bytes,
- incoming and outgoing data traffic (“traffic”),
- a process identification number (“process ID”),
- the length of time it took for the web server to respond to the user’s request,
- the web page from which the user accessed,
- the browser used by the user, the operating system, the interface, the language of the browser and the version of the browser software, .
3.1.2 The temporary storage of this data of the user is necessary for the course of a website visit to enable delivery of the website. For this purpose, the IP address of the user must necessarily remain stored for the duration of the session (i.e. the website visit).
3.1.3 A further storage of the IP address with the subsequently named data from the above list beyond this purpose takes place in log files (logs). This is done so that our web host can ensure the functionality of the website and the security of the information technology systems.
3.2 On what legal basis are these data processed?The data from point 3.1 are collected and processed for the aforementioned temporary storage purpose and also for the further storage purpose according to Art. 6 para. 1 letter f DS-GVO by our web host. The legitimate interest in the data processing also lies in these purposes. This legitimate interest is the interest of our web hoster, but also our legitimate interest in a functional website.
3.3Are there other recipients of the aforementioned data in addition to the responsible party?Our web hoster, as our order processor, has technical access to the data mentioned in 3.1.
3.4 How long is the data stored?The data from 3.1.1 are deleted as soon as they are no longer necessary for achieving the purpose of their collection. In the case of the provision of the website, this is the case when the respective session has ended. The log files are stored up to a maximum of 7 days, unless a security event requires longer storage.[Note: Here you must describe, in deviation from the standard text, a different individual handling on your part]
3.5 Is there a provision obligation?You must provide us with the data from 3.1 our web host. Otherwise, you will not be able to use our website technically and our web host cannot guarantee secure technical operation.
4 Procedure: Use of e-mail address and contact form
4.1 What data is processed for what purpose?
If we provide you with an e-mail address and a contact form provided with input fields, this serves the purpose that you can contact us. If you transmit personal data to us, these will be stored by us and processed for the purpose of contacting you
4.2 On what legal basis are these data processed?
The data from point 4.1 are processed on the basis of Art. 6 (1) letter f DS-GVO (legitimate interest of us as the responsible body). If your request aims at the conclusion of a contract, then Art. 6 (1) letter b DS-GVO is an additional legal basis (initiation, conclusion and execution of a contract.
4.3 Are there other recipients of the aforementioned data besides the controller?
Microsoft, as our mail provider, has technical access to the data mentioned in 4.1.
4.4 How long is the data stored?
The data from 4.1 will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data sent to us by e-mail or the contact form, this is the case when the respective correspondence with the user has ended and the storage is not still necessary for other reasons. The conversation is ended when it can be inferred from the circumstances that the matter concerned has been conclusively clarified.
4.5 Is there an obligation to provide?
You are not obliged to provide us with data from 4.1. You do not have to communicate with us.
6 Technical measures
6.1 Our websites are provided with an active SSL or TLS encryption for security reasons and to protect the transmission of confidential content, for example by means of enquiries that you send to us as site operator. An encrypted connection can be recognised by the fact that the address line of the browser changes from “http://” to “https://” and a lock symbol is visible in the browser line. As a result of this encryption, data that you transmit to us cannot be read by third parties.
6.2 If you contact us by means of an e-mail address specified on our websites, the transport of the content of the e-mail to us is not end-to-end encrypted. This means that the e-mails are usually encrypted in transit via the e-mail providers involved, but are not encrypted on the servers there. The contact to us via the provided contact form is technically therefore a secure communication.
6.3 As far as you can watch videos on our websites, this is done exclusively via the technique of linking to the respective video portal of a third party provider, on which videos are stored in the data protection responsibility of the operator of the portal. The respective video portal is therefore not directly embedded in our web pages. This ensures that the user’s information is not transmitted to the portal as soon as the web page on which the video is integrated is loaded. It is also guaranteed that cookies of the portals or the advertising partners of these portals cannot be set on your end device via the mere linking. Only after your deliberate click on the video preview image is a connection to the portal of the third-party provider established and the associated data processing triggered. However, this and the associated possible data processing of your user data on the linked portal then occurs exclusively as a result of your wish to view the video there. The data processing triggered by this is beyond our control and is subject to the responsibility of these portals, which provide more or less detailed information about their data processing. If you do not agree with the data processing by the third-party provider, please do not click on the video thumbnail.
B Special information
Special right of objection pursuant to Art. 21 (1) DS-GVO
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Article 6 (1) (f) DS-GVO pursuant to Article 21 (1) DS-GVO.
We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves us to assert, exercise or defend legal claims.
C Notes on B
On the procedure under A point 3.1: The collection of data to provide the website and the storage of log files are absolutely necessary for the operation of the website. Consequently, there are no interests of a data subject that outweigh our interests.
On the procedure under A point 4.1: You must explain to us in detail any interests you may have (your “special situation”) so that we can carry out a renewed weighing of interests. If our interests in further storage do not outweigh this, the personal data stored in the course of contacting you will be deleted.