Data protection

General

1. Your personal data within the meaning of Art. 4 No. 1 GDPR (eg title, name, address, e-mail address , payment information ) shall only be processed by us in accordance with the provisions of German data protection law and in consideration of the European General Data Protection Regulation (GDPR ) processed. The following regulations inform you about the nature, scope and purpose of the collection, processing and use of personal data.

2. The processing within the meaning of Art. 4 No. 2 GDPR of personal data is legal according to Art. 6 GDPR, if one of the following conditions exists:

(a) the data subject has given his consent to the processing of personal data concerning him for one or more specific purposes;

(b) the processing is necessary for the performance of a contract to which the data subject is a party or for the performance of any pre-contractual action taken at the request of the data subject;

(d) the processing is necessary to protect the vital interests of the data subject or any other natural person;

(e) the processing is necessary for the performance of a task which is in the public interest or in the exercise of official authority delegated to the controller;

(f) the processing is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data prevail, in particular where the person concerned is a child is acting.

3. The processing of special he personally identifiable data within the meaning of Article 9, Section 1 GDPR in particular under Article 9 paragraph 2 GDPR lawful if one of the success preconditions exists….:

– there is an express consent of the person;

– the processing is necessary for the assertion, exercise or defense of legal claims or for acts of the courts in the context of their judicial activity.

4. An automatic decision-making or profiling of personal data in the sense of Ar t. 22 GDPR does not take place.

5. The operator ensures the security of the data in accordance with Art. 32 GDPR by taking appropriate technical measures ,taking into account the proportionality principle .

6. In the unlikely event that data protection is breached, the competent supervisory authority will be notified in accordance with Art. 33 GDPR and the data subject in accordance with Art. 34 GDPR.

Scope

This Privacy Policy applies only to our websites. If you are forwarded to other pages via links on our pages, please inform yourself there about the respective handling of your data.

Duration of data storage

T he period of retention of the transferred data they depend on the legal retention requirements. As far as commercial and tax retention periods are to be observed, the duration of the storage of certain data can be up to 10 years.

Transfer of data to third parties

A passing on information provided within the framework of the contract data a n third parties (Art. 4 no. 10 GDPR), takes place o nly if you expressly your consent (Art. 4 no. 11 GDPR) have declared or transfer to fulfill the contract is required. The consent can be withdrawn informally at any time. Data collected by visiting the website are only collected by third parties, which are expressly mentioned below.

Responsible for the purposes of GDPR

The person responsible within the meaning of the General Data Protection Regulation (GDPR), as well as other data protection laws in the European Union and other provisions of a data protection nature is:

ibc – GmbH & Co. KG

Kemptener Straße 1

D-86807 Buchloe

Telephone: +49 82 41 91 83 968

Fax: +49 82 41 91 84 134

Storage of access data in log files

You can visit our websites without giving any personal information. We only store access data in so-called server log files, such as the name of the requested file, the date and time of the retrieval, the amount of data transferred and the requesting provider. These data are evaluated solely to ensure trouble-free operation of the site and to improve our offer and do not allow us to conclude on your person. The purpose of the processing results from our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR.

An order processing contract was concluded with the hoster hostfactory of OptimaNet Schweiz AG, Stationsstrasse 56, 8472 Seuzach. Switzerland is recognized by the EU as a country with an appropriate level of data protection.

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (PC, laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device, do not contain viruses, Trojans or other malicious software. In the cookie information is stored, each resulting in connection with the specific terminal used. However, this does not mean that we are immediately aware of your identity.

On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our page.

In addition, to improve usability, we also use temporary cookies that are stored on your device for a specified period of time. If you visit our site again to take advantage of our services, it will automatically recognize that you have already been with us and what inputs and settings you have made, so you do not have to re-enter them.

These cookies allow us to automatically recognize when you visit our site again that you have already been with us. These cookies are automatically deleted after a defined time. The data processed by cookies are for the purposes mentioned in order to safeguard our legitimate interests as well as third parties according to Art. 6 para. 1 sentence 1 lit. f GDPRrequired. Most browsers accept cookies automatically. However, you can configure your browser to have no

Cookies are stored on your computer or always a hint appears before a new cookie is created. However, disabling cookies completely may mean that you can not use all features of our website.

YouTube

Our website uses plugins from the Google-powered YouTube page. Site operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our YouTube plug-in-enabled sites, you will be connected to the servers of YouTube. The Youtube server will be informed which of our pages you visited. If you’re logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

For more information about how to handle user data, please read the YouTube Privacy Policy at https://www.google.com/intl/en/policies/privacy

Security of your data / SSL encryption

In accordance with the statutory provisions of § 13 (7) TMG, this site uses SSL encryption, which can be recognized by a lock symbol in the address bar of your browser. Submitted data can not be read by third parties if SSL encryption is activated .

In general, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we’ll use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the closed representation of the key or lock symbol in the status bar of your browser.

We also take appropriate technical and organizational security measures (TOM) to protect your data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Rights of the user

You can request information about the personal data stored about you at any time and free of charge. Your rights also include the acknowledgment, correction, limitation, blocking and deletion of such data and the provision of a copy of the data in a form suitable for transmission, as well as the revocation of consent granted and the objection. Legal storage obligations remain unaffected .

Their rights arise in particular from the following standards of the GDPR:

• Article 7 (3) – Right to revoke a data protection consent

• Article 12 – Transparent information, communication and modalities for the exercise of the rights of the data subject

• Article 13 – Duty to provide information when collecting personal data from the data subject

• Article 14 – Duty to provide information if the personal data have not been collected from the data subject

• Article 15 – Right to information of the data subject, right to confirm and provide a copy of the personal data

• Article 16 – Right to rectification

• Article 17 – Right to cancellation (“Right to be forgotten”)

• Article 18 – Right to restriction of processing

• Article 19 – Obligation to provide information in connection with the rectification or erasure of personal data or the restriction of processing

• Article 20 – Right to data portability

• Article 21 – Right of opposition

• Article 22 – Right not to be subject to a decision based solely on automated processing, including profiling

• Article 77 – Right to complain to a supervisory authority

For exercising your rights (with the exception of Art. 77 GDPR), please contact the office named under the item “Responsible for the purpsoses of GDPR” (eg by e-mail).

Supervisory authority:

Bayerisches Landesamt für Datenschutzaufsicht

Promenade 27 (Schloss)

D-91522 Ansbach

Postal address:

PO Box 606

D-91511 Ansbach

Telephone: +49 (0) 981 53 1300

Fax: +49 (0) 981 53 98 1300

E-Mail: poststelle@lda.bayern.de

Homepage: https: //www.lda.bayern.com

(It is asked to check the homepage before contact, if the data mentioned above is still up-to-date)