I. Information about the processing of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR)
1. Controller
Dr. Philipp Schön
Eschenallee 22
14050 Berlin
datenschutz@rps.legal
2. Data processed for the provision of the website and the creation of the log files
a. What data is processed for what purpose?
Every time you access content on the website, data is temporarily stored that may allow identification. The following data is collected:
- Date and time of access
- IP address
- Host name of the accessing computer
- Website from which the website was accessed
- Websites that are accessed via the website
- Visited page on my website
- Message whether the retrieval was successful
- Amount of data transferred
- Information about the browser type and version used
- Operating system
The temporary storage of data is necessary for the course of a website visit to enable delivery of the website. Further storage in log files takes place in order to ensure the functionality of the website and the security of the information technology systems. My legitimate interest in data processing also lies in these purposes.
b. On what legal basis are these data processed?
The data is processed on the basis of Art. 6 Para. 1 lit. f) GDPR. These previously described data processing operations are carried out on the basis of my legitimate interests in providing my web offer in a secure manner.
c. Are there other recipients of the personal data besides the controller?
The website is hosted by Netlify, Inc, 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA, privacy@netlify.com. The hoster receives the above data as a data processor.
d. Does the controller intend to transfer the data to a third country?
The processed data may be transferred to Netlify in the USA on the basis of the standard contractual clauses. A copy of the standard contractual clauses can be requested from Netlify at privacy@netlify.com.
e. How long will the data be stored?
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the provision of the website, this is the case when the respective session has ended. The log files are kept for 14 days directly and exclusively accessible to administrators.
3. Map service “Mapbox”
a. What data is processed for what purpose?
On my website I use the API of the mapping service „Mapbox”. Mapbox is an online mapping tool (open source mapping) that is accessed through an interface (API). Mapbox automatically collects certain technical information when requests are made to the APIs. In addition to your IP address, this includes, for example, browser information, your operating system, content of the request, limited location and usage data, the URL of the visited website and the date and time of the website visit.
With Mapbox, we graphically display the directions to and / or the location of my office on my website. The maps are integrated into my website with small code snippets (JavaScript code).
b. On what legal basis are these data processed?
The data is processed on the basis of Art. 6 Para. 1 lit. f) GDPR. My legitimate interest is that I want to make it as easy as possible for you to get to my office and to find out where my office is located when you call up my website.
c. Are there other recipients of the personal data besides the controller?
The service is operated by Mapbox Inc, 740 15th Street NW, 5th Floor, District of Columbia 20005, USA, privacy@mapbox.com. The service receives the above data as a data processor.
d. Does the controller intend to transfer the data to a third country?
The processed data may be transferred to Mapbox in the USA on the basis of the standard contractual clauses. A copy of the standard contractual clauses can be requested from Mapbox at privacy@mapbox.com.
e. How long will the data be stored?
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the provision of the map service on my website, this means that the IP address and other usage data are deleted after 30 days, according to Mapbox.
4. Contact form
a. What data is processed for what purpose?
On my website, I offer you the opportunity to contact me. In doing so, I process information about you and your request.
b. On what legal basis are these data processed?
If your contact is aimed at concluding a contract or is otherwise a pre-contractual measure, data from your contact and about you will be processed to respond to your request on the basis of Art. 6 Para. 1 lit. b) GDPR. If you send me another type of request in the context of contacting us, I use the personal data contained herein and information about you on the basis of m< legitimate interests in responding to requests and using information provided to us pursuant to Art. 6 Para. 1 lit. f) GDPR.
c. How long will the data be stored?
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the provision of the map service on m< website, this means that the IP address and other usage data are deleted after 30 days, according to Mapbox.
5. Cookies
When using my website, so-called cookies, which can be stored on your end device, are used as technical functional aids for various functions. A cookie is text information that can be stored in the web browser of your end device in each case to a visited website. The cookie is either sent to the web browser by the web server or generated in the web browser by a script as a sequence of repetitive program instructions.
Below is an overview of the cookies and other technologies I use when you use the website.
| Technology / Cookie | Legal basis | Purpose | Storage duration | Third party access |
|---|---|---|---|---|
| https://deploy-preview-1—brilliant-dusk-cb15a7.netlify.app (cookie) | Sec. 25 Para. 2 No. 2 TTDSG | Display of map content from Mapbox on my website | 1 year | Mapbox |
6. Data subject rights
a. Right of access
You can request access in accordance with Art. 15 GDPR regarding your personal data that I process.
b. Right to object
You have a right to object on special grounds (see under point II).
c. Right to rectification
If the information concerning you is not (or no longer) correct, you can request a rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
d. Right to deletion
You may request the deletion of your personal data in accordance with Art. 17 GDPR.
e. Right to restriction of processing
According to Art. 18 GDPR, you have the right to request a restriction of the processing of your personal data.
f. Right to complain
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice in accordance with Art. 77 Para. 1 GDPR. This includes the data protection supervisory authority responsible for the controller: Berlin Commissioner for Data Protection and Freedom of Information, https://www.datenschutz-berlin.de/buergerinnen-und-buerger/beschwerde/einreichen-einer-beschwerde/.
g. Right to data portability
In the event that the requirements of Art. 20 Para. 1 GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. The collection of data to provide the website and the storage of log files are absolutely necessary for the operation of the website. They are therefore not based on consent according to Art. 6 Para. 1 lit. a) GDPR or on a contract according to Art. 6 Para. 1 lit. b) GDPR, but are justified according to Art. 6 Para. 1 UAbs. 1 lit. f) GDPR. The requirements of Art. 20 Para. 1 GDPR are therefore not met.
II. Right of objection pursuant to Art. 21 Para. 1 GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is carried out on the basis of Art. 6 Para. 1 UAbs. 1 lit. f) GDPR. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website.