Privacy statement

1. Data protection at a glance

General instructions

The following instructions provide a simple overview of what happens to your personal data if you visit our website. Personal data is all data through which you can be personally identified. Please refer to our privacy statement below this text for detailed information on the subject of data protection.

Data collection on our website

Who is responsible for data collection on our website? Data is processed on our website by the website operator. Please refer to the legal notice on this website for the operator’s contact details.

How do we collect data?

Your data is, on the one hand, collected when you provide it to us. This may involve data such as the information you enter on a contact form.

Other data is recorded automatically by our IT systems when you visit the website. This primarily involves technical data (e.g. Internet browser, operating system or time at which the website page was accessed). This data is recorded automatically as soon as you access our website.

What do we use your data for?

Part of the data is collected to ensure that the website is available to you without errors. Other data can be used to analyse your user behaviour.

What rights do you have with regard to your data?

You have the right to obtain information, at any time and free of charge, on the origin, recipients and purpose of your stored personal data. You also have the right to demand the rectification, blocking or erasure of this data. You can contact the address indicated in the legal notice with regard to this and other questions concerning data protection. You are also entitled to lodge a complaint with the responsible supervisory authority.

In addition, you also have the right to demand the restriction of processing of your personal data under certain circumstances. In this respect, please refer to the details in the privacy statement under “Right to restriction of processing”.

2. General instructions and mandatory information

Privacy statement

The operators of these web pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy statement.

Various personal data is collected if you use this website. Personal data is data with which you can be personally identified. This privacy statement explains which data is collected by us and what we use it for. It also explains how and for what purpose this happens.

We wish to point out that data transmission on the Internet (e.g. when communicating by email) can have security gaps. Complete protection of the data against third party access is not possible.

Note on the controller

The controller for data processing on this website is:
Johannes Gotzler (Chairperson)
Marktoberdorfer Strasse 24
87616 Wald
Germany

Telephone: +49830292020
Email: info@albertfrey.de
The controller is the natural or legal person who, alone or together with others, decides on the purposes and means of processing of personal data (e.g. names, email addresses or similar).

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw any consent you have already given at any time. An informal message sent by email to us is sufficient in this respect. The legality of data processing that took place up until the withdrawal remains unaffected by the withdrawal.

Right to object to data collection in special cases and to direct advertising (Article 21 GDPR)

If data is processed on the basis of Article 6 (1)(e) or (1)(f) GDPR, you have the right at any time to object to the processing of your personal data for reasons that arise from your particular situation. This also applies to profiling based on these provisions. Please refer to this privacy statement for the respective legal basis for processing. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or where processing serves to assert, exercise or defend legal claims (objection pursuant to Article 21 (1) GDPR). If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling, insofar as it is associated with such direct advertising. If you object, your personal data will then no longer be used for direct advertising purposes (objection pursuant to Article 21 (2) GDPR).

Right to lodge a complaint with the responsible supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, their place of work or the place of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or a third party in a common, machine-readable format. Should you request the direct transfer of the data to another responsible person, this will only be done to the extent that it is technically feasible.

SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator. An encrypted connection is recognisable by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. Data that you transmit to us cannot be read by third parties if SSL or TLS encryption is activated.

Information, blocking, erasure and rectification

Within the framework of applicable legal provisions, you have the right at all times to free information about your stored personal data, its origin and recipients, the purpose of data processing and, if necessary, a right to rectification, blocking or erasure of this data. You can contact us at any time at the address indicated in the legal notice if you have any further questions on the subject of personal data.

Right to restriction of processing

You have the right to demand the restriction of processing of your personal data. You can contact the address indicated in the legal notice at any time to do this. The right to restriction of processing exists in the following cases:
  • If you contest the accuracy of your personal data stored by us, we usually require time to verify the accuracy of this. You have the right to demand the restriction of processing of your personal data for the duration of this verification.
  • If your personal data has been/is being processed unlawfully, you can request the restriction of data processing instead of erasure.
  • If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to demand that processing of your personal data be restricted instead of being erased.
  • If you have lodged an objection pursuant to Article 21 (1) GDPR, your interests and ours must be balanced. You have the right to demand that processing of your personal data be restricted for as long as it has not yet been determined whose interests prevail.
If you have restricted processing of your personal data, this data may, aside from its storage, only be processed with your consent or to assert, exercise or defend legal claims, or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

Objection to promotional emails

We hereby object to the use of contact data published as part of the legal notice obligation to send unsolicited advertising and information material. The website operators expressly reserve the right to take legal action in the event of unsolicited advertising being sent, such as spam emails.

3. Data protection officer

Legally required data protection officer

We have appointed a Data Protection Officer for our company. Mr Benno Zumschlinge
THEMA Managementsysteme GmbH
Hinterer Anger 309-310
86899 Landsberg
Germany

Telephone: +49 (0) 81 91-94 19 10
Email: info@thema-management.de

 4. Data collection on our website

Cookies

Some of the web pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called session cookies. They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can configure your browser so that you are informed about the setting of cookies, only permit cookies in individual cases, prohibit the acceptance of cookies in certain cases or in general and activate the automatic deletion of cookies when the browser is closed. The functionality of this website may be restricted if cookies are deactivated.

Cookies that are required for the purposes of electronic communication or to provide certain functions which you wish to use (e.g. shopping cart function) are stored on the basis of Article 6 (1)(f) GDPR. The website operator has a legitimate interest in the storage of cookies in order to provide its services in an optimum way that is free of errors. Insofar as other cookies are stored (e.g. cookies for analysing your surfing behaviour), these are explained separately in this privacy statement.

Server log files

The provider of the web pages automatically collects and stores information which your browser automatically transmits to us in so-called server log files. This includes the following information:
  • The browser type and browser version
  • The operating system used
  • The referrer URL
  • The host name of the accessing computer
  • The time of the server inquiry
  • The IP address
This data is not merged with other data sources.

This data is collected on the basis of Article 6 (1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website. The server log files must be recorded for this purpose.

Inquiry by email, telephone or fax

If you contact us by email, telephone or fax, your inquiry and all personal data derived from it (name, inquiry) are stored and processed by us for the purpose of handling your concern. We do not forward this data to other parties without your consent.

This data is processed on the basis of Article 6 (1)(b) GDPR if your request is related to the fulfilment of a contract or is necessary for implementing pre-contractual measures. In all other cases, processing is based on your consent (Article 6 (1)(a) GDPR) and/or on our legitimate interests (Article 6 (1)(f) GDPR), since we have a legitimate interest in the effective processing of inquiries addressed to us.

The data you have sent to us through contact inquiries will be retained by us until you request erasure, withdraw your consent to storage or when the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions, particularly statutory retention periods, remain unaffected.

5. Newsletter

Newsletter data

If you would like to receive the newsletter offered on the website, we require an email address from you and information that allows us to verify that you are the owner of the email address provided and agree to receive the newsletter. Further data is not collected, or only on a voluntary basis. We use this data exclusively for sending the information requested and do not pass it on to third parties. Data entered on the newsletter registration is processed exclusively on the basis of your consent (Article 6 (1)(a) GDPR). You can withdraw your consent to the storage of data, the email address and their use for sending the newsletter at any time (e.g. using the “unsubscribe” link in the newsletter). The legality of data processing operations that have already occurred remains unaffected by the withdrawal. The data you have stored with us for the purpose of subscribing to the newsletter will be retained by us until you unsubscribe from the newsletter and deleted after successful unsubscription. Data stored by us for other purposes remain unaffected by this.

Clever Elements

This website uses Clever Elements to send newsletters. The provider is Clever Elements GmbH, Prinzessinnenstr. 19-20, 10969 Berlin (Germany).

Clever Elements is a service that can be used for purposes such as organising and analysing the dispatch of newsletters. The data entered by you for the purpose of subscribing to the newsletter is stored on Clever Elements servers in Germany.

If you do not wish for Clever Elements to analyse your data, you must unsubscribe from the newsletter. We provide a corresponding link in every newsletter message for this purpose. You can also unsubscribe from the newsletter directly on the website.

Data analysis by Clever Elements

Using Clever Elements enables us to analyse our newsletter campaigns. Among other things, it enables us to see whether a newsletter message has been opened and which links (if any) have been clicked. This enables us to determine, among other things, which links were clicked particularly often.

Clever Elements also allows us to subdivide newsletter recipients into different recipient categories (e.g. place of residence). As a result, the newsletters can be adapted more effectively to suit the respective target groups.

For detailed information concerning the functions of Clever Elements, please refer to the following link: https://cleverelements.com/product.

Legal basis

Data is processed on the basis of your consent (Article 6 (1)(a) GDPR). You can withdraw this consent at any time. The legality of data processing operations that have already occurred remains unaffected by the withdrawal.

Storage period

The data you have stored with us for the purpose of subscribing to the newsletter will be retained by us until you unsubscribe from the newsletter and deleted from our servers and those of Clever Elements after the newsletter has been cancelled. Data stored by us for other purposes remain unaffected by this.

 6. Plug-ins and tools

Google Fonts

This website uses so-called web fonts for uniform display of fonts. These are provided by Google. When you activate a web page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly.

The browser you are using must connect to the Google servers for this purpose. Google is therefore informed that our website was accessed via your IP address. Google Fonts are used in the interest of a uniform and appealing presentation of our online offering. This represents a legitimate interest pursuant to Article 6 (1)(f) GDPR.

A standard font is used by your computer if your browser does not support Google Fonts.

Further information on Google Fonts is available at https://developers.google.com/fonts/faq and in the Google privacy statement: https://policies.google.com/privacy?hl=de.

Google Maps

This website uses the Google Maps service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.

It is necessary to store your IP address to use Google Maps functions. This information is usually transmitted to a Google server in the United States and stored there. The provider of this website has no influence over this data transmission.

Google Maps is used in the interest of an attractive presentation of our online offering and to make it easier to find the places we have indicated on the website. This represents a legitimate interest pursuant to Article 6 (1)(f) GDPR.

Further information on handling user data is available in the Google privacy statement: https://policies.google.com/privacy?hl=de.