The following declaration gives you an overview of what kind of personal data is collected and stored for what purpose when you access our website or when you use our internet services and contact options.
We inform you below about your rights as a data subject and tell you, among other things, which body is responsible for data processing and compliance with data protection regulations.
"Personal data" is not only obvious personal information, such as a person's name or address, but also the IP address and information about which pages a person has visited on the internet (user behaviour).
1. Name and address of the person responsible
Digital Hub Rhein-Neckar GmbH
2. Notes on data processing / definition
2.1 Depending on the reason for the processing, the provision of personal data may be required by law or contract or may be necessary for the conclusion of a contract. If this is the case, we will indicate this below and also the possible consequences of not providing it. Automated decision-making or profiling in accordance with Article 22(1) and (4) will also only take place if we explicitly refer to this.
2.2 If you do not provide us with the data in the cases outlined below, this would result in you not being able to use the service / corresponding function or contact us. you will not be able to use the service / the corresponding function or you will not be able to contact us. be able to contact us.
2.3 When visiting our website, your surfing behaviour may be statistically analysed. This is done mainly mainly with cookies and so-called analysis programs.
2.4 For the purposes of this privacy statement: Cookies: Cookies are small text files that are stored by your stored on your end device by your browser. Cookies serve to make our offer more user-friendly and safer. more secure.
However, if you deactivate cookies, it may no longer be possible to fully use all the functions of the websites you visit or various tools on the Internet.
2.5 In some cases, we use external service providers (processors within the meaning of Article 28 of the GDPR, e.g. hosting service providers) to process your data, to whom we may disclose personal data under certain circumstances. These are carefully selected and commissioned by us, are bound by our instructions and are regularly monitored. Otherwise, your data will only be disclosed to other recipients if we refer to this separately below.
3. Data processing via website
To ensure that the processing of your personal data is carried out in such a way that the data is protected against unauthorised or unlawful processing and against accidental loss, destruction or damage, we use encryption (SSL) on our website and all sub-pages.
3.2. Visit our website
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing system of the calling computer. This involves the following data:
- Name of the retrieved file
- Date and time of the retrieval
- Amount of data transferred
- Message as to whether the retrieval was successful
- IP address
- Browser type
- Browser version and its language
- Operating system and its interface
- Referrer URL
- Access status/http status code
- Type of terminal device
The data is stored in the log files of our hoster's IT system.
Purpose of processing: The processing of the above-mentioned data is necessary in order to display the website to you and to ensure the security and stability of our information technology systems and the technology of our website. In addition, the processing is carried out in order to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.
Legal basis: We have a legitimate interest in the processing of data within the meaning of Art. 6 (1) lit. f DSGVO, whereby the legitimate interest results from the stated purpose.
Storage period: The data is deleted as soon as the data storage can no longer fulfil the purpose. The time is to be determined for the individual case, whereby the storage is to be terminated at the latest insofar as possible claims under civil law have become time-barred in accordance with § 199 BGB or criminal prosecution has also become (§§ 78, 79 StGB) is no longer possible.
3.3. Contacting - General
If you contact us (e.g. by e-mail, fax, telephone), we will store the data you provide, such as your name, e-mail address and any other contact details you provide.
Purpose of processing: The processing of the above-mentioned data is necessary in order to be able to process or respond to your request that you have communicated to us in the course of contacting us.
Legal basis: Depending on the request, the processing of the data may be based on different legal bases. In any case, however, the processing is necessary to protect our legitimate interests within the meaning of Art. 6 (1) lit. f DSGVO. The legitimate interest results from the fact that we want to follow up on your request and fulfil the processing purpose.
Storage period: We will delete your personal data at the latest as soon as storage is no longer necessary. The point in time is to be determined for the individual case, whereby the storage is to be terminated at the latest insofar as any civil law claims have become statute-barred in accordance with § 199 BGB or criminal prosecution is also no longer possible due to the statute of limitations (§§ 78, 79 StGB).
3.4. Our own cookies
We use our own so-called cookies at various points on our website. For information on the function of cookies and how you can generally prevent cookies from being set, please refer to the subsection "Information on data processing / definition".
Cookies on our website that (at least also) serve to analyse the user behaviour of visitors to our website (tracking) are only set on the visitor if the visitor has given prior consent. Cookies that do not serve tracking purposes are set by our system without this consent.
Processing purpose: The cookies enable us to recognise your browser on your next visit. The cookies are used by us to provide the service, to analyse the surfing behaviour of our users on our website and to increase the user-friendliness.t.
Legal basis: If the setting of the cookie and the processing of the data obtained based on it serves at least the analysis of the user behavior of visitors to our website (tracking), the processing is based on the consent of the data subject pursuant to Art. 6 (1) a DSGVO. In other cases, the cookies are set to protect our legitimate interests within the meaning of Art. 6 (1) (f) DSGVO, in which case the legitimate interest arises from the fact that we want to fulfill the processing purpose.
We offer you the opportunity to subscribe to our newsletter. As part of the registration and dispatch process, we process personal data. In order to be able to verify your information, you will receive a confirmation e-mail after your registration, by which we verify that you are the owner of the e-mail address provided (so-called double opt-in procedure).
Purpose of processing: As part of the registration process, we need your e-mail address to verify that you are the owner of the specified e-mail address. Subsequently, we need your e-mail address to be able to send you our newsletter.
Legal basis: The legal basis for the processing of personal data is based on your consent to Art. 6 (1) lit. a DS-GVO.
Storage period: We will delete your personal data at the latest as soon as the storage is no longer necessary. The point in time is to be determined for the individual case, whereby the storage is to be terminated at the latest insofar as any civil claims have become time-barred according to § 199 BGB (German Civil Code) or criminal prosecution is also no longer possible due to the statute of limitations (§§ 78, 79 StGB).
3.6. Newsletter tool „CleverReach“
We use the service "CleverReach" for sending newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service with which the newsletter dispatch can be organized and analyzed. The data you enter for the purpose of receiving newsletters (e.g. e-mail address) is stored on CleverReach's servers in Germany or Ireland.
Our newsletters sent with CleverReach allow us to analyze the behavior of newsletter recipients. Here, among other things, it can be analyzed how many recipients have opened the newsletter and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter.
Processing purpose: By analyzing newsletter campaigns, we are able to better manage our newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
Legal basis: The legal basis for the processing of personal data is based on your consent to Art. 6 (1) lit. a DS-GVO. You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation. If you do not want any analysis by CleverReach, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter. Furthermore, you can also unsubscribe from the newsletter directly on the website.
Storage period: The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of CleverReach after you unsubscribe from the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for the member area) remains unaffected by this.
Further information: The following link will take you to the data protection information of CleverReach: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/
4. other data processing mediated through the website
4.1 Cookie consent technology from Cookiefirst
This website uses cookie consent technology from CookieFirst to obtain your consent to store certain cookies on your terminal device and to document this consent in accordance with data protection law. The provider of this technology is Digital Data Solutions B.V., Plantage Middenln 42a, 1018 DH Amsterdam, website: https://cookiefirst.com/ (in the following „CookieFirst“).
When you enter our website, the following personal data is transferred to CookieFirst:
- Your consent(s) or revocation of your consent(s).
- Your IP address
- Information about your browser
- Information about your terminal device
- Time of your visit to the website
Furthermore, CookieFirst stores a cookie in your browser in order to be able to assign the consent(s) granted to you or their revocation. The data collected in this way is stored until you request us to delete it, delete the CookieFirst cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.
Contract on order processing We have concluded an order processing contract with CookieFirst. This is a contract required by data protection law, which ensures that CookieFirst only processes the personal data of our website visitors in accordance with our instructions and in compliance with the DSGVO.Change cookie settings
4.2. "OpenStreetMap" map service
We use the map service OpenStreetMap on our website via the Leaflet API to display geographical maps. OpenStreetMap is a project of the OpenStreetMap Foundation (hereinafter "OpenStreetMap"), St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The use of the service is based on the Open Data Commons Open Database License (ODbL).
In order to display the maps to you, a connection to the servers of OpenStreetMap is established when you click on the map section and personal data is transferred to OpenStreetMap. In doing so, OpenStreetMap processes at least the following data:
- IP address
- Referrer URL
- operating system
- browser version and terminal device used
- date and time of access
When using via mobile devices, your location data may also be stored. However, this only happens with your consent, which you give by setting your mobile device accordingly.
If you have an OpenStreetMap user account and are logged into this account at the time of accessing our website, the following personal data in particular will also be transferred from you to the OpenStreetMap servers:
- User ID
- E-mail address linked to your account.
Purpose of processing: The above-mentioned data is used to visually display geographical information on our website and to make our website more user-friendly and interesting in this way.
Legal basis: The legal basis for the processing of your personal data is based on your consent to Art. 6 (1) lit. a DS-GVO.
Storage duration: Since we have no influence on the further processing and use of the data by OpenStreetMap, we cannot make any statement about how long the OpenStreetMap Foundation stores the data.
Data transmission: Your data is sent to the OpenStreetMap Foundation servers in the United Kingdom and the Netherlands. Transmissions to other servers are limited to maps.wikimedia.org (map layers) and unpkg.com (leaflet files) after analysis by developer tools.
More information: The following link will take you to OpenStreetMap's privacy notice: https://wiki.osmfoundation.org/wiki/Privacy_Policy. This link provides information about the API Leaflet uses: https://www.leafletjs.com
We have integrated the plugin for the video portal YouTube on our website. The provider is YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066 USA (hereinafter "YouTube").
By activating the video by clicking on it, your browser establishes a direct connection to a YouTube server in the USA. YouTube then transmits the video content embedded in our website to your browser.
Through this, YouTube processes at least the following data:
- Your IP address
- Referrer URL
YouTube processes your data on its own responsibility. Accordingly, we are not the data controller in connection with this service. Nevertheless, based on Art. 13 DS-GVO, we would like to inform you as far as possible about the data collection in connection with this service.
Purpose of processing: The above data is used to be able to display videos from the YouTube platform on our website.
Legal basis: The legal basis for the processing of personal data is based on your consent to Art. 6 (1) lit. a DS-GVO.
Storage period: Since we have no influence on the further processing and use of the data by YouTube, we cannot make any statement about how long YouTube will store the data.
Data transmission: Your data is sent to YouTube's servers in the USA. It is not excluded that YouTube transmits the data to third parties.
5. Information on the data subject rights
ADue to the processing of your personal data, you are a data subject within the meaning of the GDPR and you are entitled to the following rights against us, whereby we are hereinafter referred to as the "controller":
Right to information, Art. 15 DSGVO You have the right to request information from the controller as to whether the controller is processing personal data relating to you. If the answer is in the affirmative, you have a right to be informed about the information listed in Art. 15 DSGVO.
Right to rectification of personal data, Art. 16 DSGVO Pursuant to Art. 16 DSGVO, you have a right against the controller to have personal data concerning you corrected or completed, insofar as the personal data concerning you is incorrect or incomplete.
Right to erasure ("right to be forgotten"), Art. 17 DSGVO In accordance with Art. 17 DSGVO, you have the right to request that the controller erases personal data concerning you.
Right to restriction of processing, Art. 18 DSGVO. As a data subject, you have the right under the conditions of Art. 18 DSGVO to request the controller to restrict processing.
Right to information, Art. 19 DSGVO In accordance with Art. 19 DSGVO, you have the right to be informed of the recipients to whom the personal data concerning you has been disclosed and to whom the controller has notified your assertion of the rights to rectification, erasure or restriction of your data.
Right to data portability, Art. 20 DSGVO Under the conditions of Art. 20 DS-GVO, you have the right to receive the personal data concerning you in a structured, common and machine-readable format. You have the right, under the conditions of Art. 20 DS-GVO, to transfer this data to another controller without hindrance by the controller to whom the personal data was provided. You have the right to obtain that the personal data be transferred directly from one controller to another controller, insofar as this is technically feasible.
Right to object to processing, Art. 21 DSGVO In accordance with Art. 21 DSGVO, you have the right to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6(1)(e) or (f). This also applies to profiling based on these provisions. If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
Right not to be subject to automated decision-making, including profiling, Art. 22 DSGVO As a data subject, you have the right under Art. 22 DSGVO not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you.
Right to revoke the declaration of consent under data protection law, Art. 7 DSGVO In accordance with Art. 7 DSGVO, you have the right to withdraw your consent to the processing of personal data relating to you at any time.
Right of appeal to a data protection supervisory authority, Art. 77 DSGVO Without prejudice to any other remedies, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 DSGVO if you consider that the processing of your personal data by us infringes the DSGVO.