Data Processing Statement
I. General information
This notice applies to the use of the website schongeil.de (hereinafter also referred to as “website”, “us” or “we”) under the URL https://www.schongeil.de
Privacy notices are required when personal data is processed. Personal data are in particular name, address, telephone number, e-mail address, social media identifier (profile name), bank details, date of birth, IP address, cookie identifiers and geotags.
Important abbreviations:
GDPR: General Data Protection Regulation (VO EU 2016/679)
UWG: Law against Unfair Competition
EEA: European Economic Area
Art.: Article
Para.: Paragraph
lit.: Letter
II. Legal bases, purposes and duration of data processing
The following legal bases (Arabic numerals) and the purposes of data processing based on them (bullets) are to be understood as general information and examples. The presentation of further legal bases, in particular Art. 6 para. 1 lit. c, lit. d and lit. e GDPR, has been deliberately omitted, as these are not relevant for the processing of personal data when using this website.
Under the last heading “Processing”, this data protection notice contains specific information on the processing, e.g. regarding the use of cookies, web analytics or the use of social media plug-ins. These concrete purposes of data processing can be assigned to the legal bases listed here.
1. Data processing with consent, Art. 6 para. 1 lit. a u. Art. 9 para. 2 lit. a GDPR
Data processing is always permissible if consent has been given.
• Registration as a customer
• Contact form / Contact by e-mail
• Comments on blog posts
• Social media plug-ins
• Use of functional cookies (e.g. web analysis)
• Use of marketing cookies
• Newsletter dispatch, legal basis in the case of a contract for goods or services: Section 7 (3) of the German Unfair Competition Act (UWG)
2. Data processing for the fulfilment of a contract, Art. 6 para. 1 lit. b. DSGVO
Data processing for the performance of a contract is permissible, e.g. the processing of name and address when ordering goods or services. Likewise, processing for the performance of pre-contractual measures at the request of the data subject is permissible, e.g. booking requests via a contact form.
• Registration as a customer, if required for the fulfilment of a contract
• Contact by e-mail, directed towards the conclusion of a contract
• Other processing, if necessary for the conclusion or fulfilment of a contract
3. Data processing for the protection of legitimate interests, Art. 6 para. 1 lit. f GDPR
Data processing is also permitted if our legitimate interests or the interests of third parties must be safeguarded and these interests outweigh your interest in protecting your data. Your interest in protecting the data outweighs, for example, the impairment of your fundamental rights or freedoms.
• Storage of IP addresses, completely anonymised or pseudonymised in the last two bytes
• Storage of further data in .log files
• Contact by e-mail, if necessary to protect legitimate interests
• Use of support systems, e.g. live chat
• Use of technically necessary cookies
• Use of functional cookies (e.g. web analysis)
• Use of 3rd party cookies
4. Duration of data processing
A deletion of the personal data takes place,
• if you assert your right to erasure against us and there is no legal basis for further processing
• if the data is no longer required to achieve the purpose for which it was collected
• in the case of complete IP addresses in .log files: at the latest seven days after they have been collected; if they are processed beyond this time, the IP addresses are anonymised or pseudonymised in the last two bytes (e.g. 192.168.xxx.xxx)
• for “session cookies”: after expiry of the respective session on our website or when you delete them
• for “permanent cookies”: when you delete them or when the cookies are no longer needed or when their programmed duration has expired (usually after six months).
III. Responsible entity
Contact details of the controller of personal data:
Oliver Eichhof
Eismeerweg 9E
22145 Hamburg
Germany
E-Mail: schongeil@mailbox.org
IV. Rights of the persons concerned
As a data subject, you can assert the following rights against the responsible body. For this purpose, please use the contact options indicated under the heading “Responsible entity”.
1. Right to confirmation and information, Art. 15 GDPR
You can request confirmation that personal data relating to you is being processed. If you receive confirmation, you can then request information about:
• the purposes of the data processing
• the categories of personal data
• the recipients or categories of recipients of the data
• the planned duration of the storage or criteria for determining the duration
• the existence of the rights of rectification or erasure
• the existence of the right to restrict processing
• the existence of the right to object
• the existence of the right to lodge a complaint with a supervisory authority
• any available information on the origin of the data, if the data has not been collected directly from you
• the existence of automated decision-making (incl. “profiling”) pursuant to Art. 22 (1) and (4) GDPR
• the existence of data transfer to a third country and / or to an international organisation
• in the case of data transfer to a third country and / or to an international organisation: appropriate safeguards pursuant to Art. 46 GDPR
2. Right to rectification and / or completion, Art. 16 GDPR
If the personal data concerning you is incorrect or incomplete, you may request that it be corrected and/or completed. The controller must then carry out the correction / completion without delay and will inform you of this.
3. Right to erasure (“right to be forgotten”), Art. 17 GDPR
In the following cases, you can request immediate deletion of the personal data concerning you:
• the data are no longer necessary for the purposes for which they were collected or otherwise processed
• consent given is revoked and there is no other legal basis for further processing
• objection pursuant to Art. 21 (1) GDPR without overriding legitimate grounds for processing
• objection pursuant to Art. 21 (2) GDPR
• the data have been processed unlawfully
• the data controller is obliged to erase the data on the basis of Union law or the law of one of the Member States
• there is a data collection and processing pursuant to Art. 8 (1) GDPR
The right to erasure is excluded if the processing of the data is necessary:
• to exercise the right to freedom of expression and information
• to comply with a legal obligation under Union law or a law of one of the Member States
• to perform a task in the public interest
• for the exercise of official authority, insofar as this has been delegated to the controller
• for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR
• if deletion of the data is likely to render impossible or seriously prejudice the achievement of the purposes of the following processing operations (Art. 89 (1) GDPR):
– archiving purposes in the public interest
– scientific or historical research purposes
– statistical purposes
• to assert, exercise or defend legal claims
If there is an obligation to delete the data:
The responsible body will inform you about the deletion of the data. If the personal data concerning you has been made public by the responsible body, all responsible bodies that process this data will also be informed of your request for deletion. This then also concerns the deletion of all links to the data and / or copies and / or replications of the data.
4. Right to restrict processing, Art. 18 GDPR
Under the following conditions, the processing of personal data concerning you must be temporarily or permanently restricted at your request:
• you have contested the accuracy of the data, Art. 16 DSGVO, and this is verified by the controller
• the processing is unlawful, but you wish to have the processing restricted instead of erasing it
• the data is no longer necessary for the purposes of processing, but you need the data to assert, exercise or defend legal claims
• you have lodged an objection to processing, Art. 21 (1) DSGVO, but it is not yet clear whether this is justified
After the restriction of processing has taken place, you will be informed of this by the controller, as well as before the restriction is lifted again. After the restriction, your data may continue to be stored, but only processed in the following cases:
• consent has been given
• legal claims are to be asserted, exercised or defended
• for the protection of another person
• there is an important public interest of the EU and / or a Member State
5. Right to information, Art. 19 GDPR
If you have exercised your rights under Articles 16 to 18 of the GDPR (rectification, erasure, restriction of processing), the controller is obliged to inform all recipients to whom the data have been disclosed, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
6. Right to data portability, Art. 20 GDPR
The controller must provide you with the personal data relating to you in a structured, commonly used and machine-readable format. The unimpeded transfer of this data to another controller must be ensured, provided that
• the processing is based on consent (Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR) and / or
• the processing is carried out to fulfil a contract or pre-contractual measures (Art. 6 para. 1 lit. b GDPR) and
• the processing is carried out with the aid of automated procedures
The freedoms and rights of other persons must not be affected. The right to data portability does not exist for data processing operations
• for the performance of a task in the public interest
• in the exercise of official authority, insofar as it has been delegated to the responsible body
You may request that the data be transferred directly to another responsible body, insofar as this is technically feasible.
7. Right of objection, Art. 21 GDPR
You may object at any time if the data processing is
• is based on Art. 6 para. 1 lit. f DSGVO or
• serves direct advertising purposes or
• for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR
The same applies to corresponding profiling. The objection must be justified. It is sufficient if you state as a reason that you no longer wish the data to be processed. After the objection, the data will no longer be processed.
The controller may continue to process the data despite your objection if
• there are compelling legitimate grounds for the processing which override your interests, rights and freedoms; or
• the processing serves to assert, exercise or defend legal claims, or
• in the case of processing under Article 89(1) of the GDPR: processing is necessary for the performance of a task carried out in the public interest.
In connection with the use of information society services, you may also exercise your right to object by means of automated procedures using technical specifications.
8. Right of withdrawal, Art. 7 (3) GDPR
You can revoke the data protection consent in its entirety for the future at any time. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected by this.
9. Automated decision in individual cases including profiling, Art. 22 GDPR
You have the right to withdraw from a decision based on automated processing if the decision produces legal effects vis-à-vis you or similarly significantly affects you. The same applies to profiling.
This right is not subject to limitations if the decision is based on special categories of personal data as defined in Article 9(1) of the GDPR, e.g. data concerning political opinions, religious or philosophical beliefs, genetic or biometric data and data concerning health or sex life or sexual orientation.
However, if you have consented to automated processing and neither Union law nor the law of a Member State prohibits such consent (Article 9(2)(a) GDPR) or if the processing is necessary for a substantial public interest (Article 9(2)(g) GDPR), your right may be excluded as described below, even if special categories of personal data are processed.
This right shall not exist if the decision based on automated processing is
• is necessary for the conclusion or performance of a contract between you and the controller, or
• is permissible based on legal provisions of the Union and/or one of the Member States and
• your rights, freedoms and legitimate interests are adequately protected by these legal provisions or
• is carried out with your express consent
In the above first and last case of an exclusion of your right described here, the controller will take reasonable steps to safeguard your other rights, freedoms and legitimate interests. This includes, in particular, the right to intervene in the decision by the controller, to express your point of view and to contest the decision.
10. Right to complain to a supervisory authority, Art. 77 GDPR
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR. You will be informed by the supervisory authority to which the complaint has been lodged about the status and outcome of the complaint, including the possible remedies (esp. Art. 78 GDPR). For more detailed information on the competences, please contact:
The Federal Commissioner for Data Protection and Freedom of Information
Husarenstraße 30
53117 Bonn – Germany
Tel.: +49 228/997799-0
Fax: +49 228/997799-550
E-Mail: poststelle@bfdi.bund.de
Web: http://www.bfdi.bund.de
VI. Processing
The following processing operations (purposes of data processing) can be assigned to the legal bases under section II of this data protection notice. Any data transfer to third countries (states outside the EU / EEA) is shown in detail for each processing operation.
1. Google Products
On this website we use the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Further information about the various technologies and associated data processing can be found here: https://policies.google.com/technologies?hl=en and in Google’s privacy policy: https://www.google.com/policies/privacy.
When using Google services, depending on the service, different data is sent via your browser to Google’s servers. In the following, we explain which services we use for which purposes and which data is processed to our knowledge.
Google Web Fonts
Various Google web fonts are used on this page. However, these are integrated by local integration on this server in such a way that no contact with Google servers is necessary, thus does not happen and when calling up this page (and the font) your IP is not recorded by Google.
2. Web analysis
We currently do not use web analytics and do not collect any data about your visit to our pages.
3. Ways of contacting
If you use the contact form, your name and first name as well as your e-mail address will be collected and used. If you click on an e-mail address elsewhere, your standard e-mail programme opens and you can write us a message. Your e-mail address and the data you sent in the e-mail will be used.
4. Comments
If you use the comment function, you can enter a name and also your email address. Entering the email address is not obligatory. When you send the comment, your IP will be saved. This is automatically deleted after 14 days. The purpose behind this: Should insults or abuse of any kind take place, this short-term collection is necessary in order to be able to act accordingly.
5. .log-Files
Wir erheben und verarbeiten keine von Ihrem Browser automatisch übermittelte Informationen in sogenannten .log-Files. Der uns zur Verfügung gestellte Webspace ist in seiner Grundkonfiguration entsprechend darauf eingestellt, keine .log-Files zu speichern.
6. Cookies and embedded content
This website does not use any functional or other cookies. Accordingly, no cookies are stored on your computer when you access the site for the first time. However, we offer various media content, so-called embedded content, via various integrations. This media content is only loaded with your consent, which means that cookies from the providers can also be set. If you have given your consent by mistake, you can revoke it by clicking on the following button (if a blue “Ok” button is visible, you have not given your consent).
<<<— PLEASE CHECK COOKIE INTEGRATION PLUGIN —>>>
The providers from which content may be embedded are listed below. More detailed information about the providers’ data processing can be found under the links listed below:
bandcamp
Operator: Bandcamp Inc., privately held company in San Francisco, CA, USA
Website: https://bandcamp.com/
Privacy Policy: https://bandcamp.com/privacy
hearthis
Operator: hearthis.at, Benedikt Groß, Annaberger Strasse 28, 209125 Chemnitz, Germany
Website: https://hearthis.at
Privacy Policy: https://hearthis.at/datenschutz/
Instagram
Operator: Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA
Website: https://www.instagram.com
Privacy Policy: https://help.instagram.com/155833707900388
Mixcloud
Operator: Mixcloud Limited, 96 Leonard Street, London, EC2A 4RH
Website: https://www.mixcloud.com
Privacy Policy: https://www.mixcloud.com/privacy/
Soundcloud
Operator: SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany
c/o JAG Shaw Baker, Berners House, 47-48 Berners Street, London W1T 3NF, Großbritannien
Website: https://soundcloud.com
Privacy Policy: https://soundcloud.com/pages/privacy
Vimeo
Operator: Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA
Website: https://vimeo.com
Privacy Policy: https://vimeo.com/privacy
YouTube
Operator: YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA
Website: https://www.youtube.com
Privacy Policy: https://www.google.co.uk/intl/de/policies/privacy/