Data protection – Everything that is right should also be right
1. Who is responsible for data processing and who can I contact?
Alexander W. Reitz,
45721 Haltern am See, Germany
Phone +49 23648819753
Further information on Reitz Navigation can be found on the imprint of our homepage at https://reitznavigation.com/impressum.
2. Legal basis of processing
- Insofar as we obtain the consent of the data subject for processing of personal data, Article 6 paragraph 1, lit. a EU General Data Protection Regulation (DSGVO) as legal basis (consent) as legal basis for the processing of personal data.
- In the processing of personal data required to fulfill a contract of which the data subject is a party, Article 6 (1) lit. b DSGVO is the legal basis of the processing (purpose of contract). This also applies to processing operations required to carry out pre-contractual actions.
- To the extent that processing of personal data is required to fulfill a legal obligation to which we are subject, Article 6 (1) lit. c DSGVO Legal basis (legal obligation).
- In the case that vital interests of the data subject or any other natural person require the processing of personal data, Article 6 (1) lit. d DSGVO as legal basis (protection of vital interests).
- If the processing is necessary for the protection of a legitimate interest on our part or of a third party and if the interest, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6 paragraph 1 lit. f DSGVO is the legal basis for processing (consideration in the case of legitimate interest). The legitimate interest on our part lies in the execution of our business activities.
3. Processing of access data and logfiles – sources of personal data
Our website is designed so that personal information is only requested when it is really necessary. You can terminate the use of our website at any stage by closing your browser or visiting another website. The personal data we process comes primarily from the persons concerned themselves, for example by doing so
- as a user of our website via the web browser and the technical system of the user to transmit information, such as the IP address, to our web server,
- as interested parties request information material or an offer from us,
- when customers place an order or contract with us,
- as suppliers, we supply goods to us as agreed, respectively we have services to us, etc. provide.
Only in exceptional cases may the personal data processed by us also come from third parties, for example, when a person acts on behalf of a third party.
We collect and use in the use of our website access data / log files such:
- Name of your Internet service provider
- the page from which you visit us or the name of the requested file
- Date and time of the request
- transferred amount of data
- Message if the retrieval was successful
- the incomplete IP address (first three number blocks) of the requesting computer
- referring URLs
- used browser types
- used operating systems
The processing of this data is for the purpose of enabling the use of the website (connection establishment), system security, the technical administration of the network infrastructure and to optimize the Internet offer, thus based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f DSGVO and for the protection of users and against other unauthorized use. A transfer of these data to third parties does not take place.
Concrete categories, purposes and legal bases for the processing of personal data
We process the following categories of personal data:
- Users of our website
- Interested persons
Depending on the category of data we are dealing with, we process personal data for the following purposes and on the basis of the respective legal basis of the General Data Protection Regulation (DSGVO):
Data from users of our website are collected and processed by us non-personal. An assignment to specific persons is impossible. The IP address is only processed anonymously. If exceptionally personal data are involved, we process them to safeguard our legitimate interests on the basis of Art. 6 (1) lit. f DSGVO. Our legitimate interests in this sense are: Interest in the security and integrity of our website and the data on our web server (in particular fault and error detection, as well as tracking of unauthorized access), interest of marketing and interest of statistical surveys to improve our website and our services. In the context of a consideration, we have come to the conclusion that the processing of data is necessary to safeguard the legitimate interests referred to above and that their interests or fundamental rights and freedoms requiring the protection of personal data do not prevail.
Interest data / data from press representatives
As far as we process data of interested parties of our services, this only happens if you enter this data in an input field or by e-mail for the purpose of the request to us and send it to us. These entries are voluntary for you. We then process this data exclusively for processing your request to us. The processing of this data voluntarily transmitted to us for the purpose of providing information about our services takes place as a pre-contractual settlement in accordance with Art. 6 (1) lit. b DSGVO and also on the basis of the consent granted to you by submission pursuant to Art. 6 para. 1 lit. a GDPR.
We process the data of our customers for the purpose of Contract execution in accordance with Art. 6 (1) lit. b DSGVO and / or on the basis of a given consent pursuant to Art. 6 (1) lit. a GDPR. This also applies to processing operations that are necessary for the implementation of pre-contractual measures (eg in the context of the preparation and negotiation of offers).
We process the data of our suppliers and business partners for the purposes of contract execution in accordance with Art. 6 para. 1 lit. b DSGVO and / or on the basis of a given consent pursuant to Art. 6 (1) lit. a GDPR. This also applies to processing operations that are necessary for the implementation of pre-contractual measures (eg in the context of the preparation and negotiation of offers).
Recipients or categories of recipients of personal data
Your personal data will only be forwarded to third parties or otherwise transmitted if this is necessary for the purpose of contract execution (eg to process an order or an order) or for billing purposes (eg to process the payment transaction when purchasing goods or services) or you have previously consented.
Categories of recipients can therefore be
- Shipping service providers, suppliers
- Payment service providers, banks
Data processing with newsletter dispatch
It is possible to subscribe to a free newsletter on our website or as part of a request. The data from the input mask are transmitted to us when registering for the newsletter. It is about
- the email adress
- your first and last name (so that we can address you personally). When registering for the newsletter, the following data will also be collected:
- the IP address of the user
- date and time of registration.
Purpose of data processing
he collection and processing of the e-mail address of the user serves to deliver the newsletter. The collection of first and last names serve the personal address within the newsletter. We use the e-mail address for promotional purposes. The collection of other personal data in the context of the registration process serves to prevent misuse of the services or the email address used.
Legal basis of data processing
The legal basis for the processing of the data after the user has registered for the newsletter is the consent of the user Art. 6 para. 1 lit. a GDPR. The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 Abs. 3 UWG.
Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. The e-mail address of the user and his name and surname are stored accordingly as long as the subscription to the newsletter is active. The other personal data collected during the registration process will normally be deleted after a period of seven days.
Opposition and removal possibility
The subscription of the newsletter can be terminated by the user at any time free of charge and informally. For this purpose, there is a corresponding link in each newsletter. This also allows a revocation of the consent to the storage of the personal data collected during the registration process. Please also note the additional options and information regarding our shipping service provider MailChimp.
Use of the shipping service provider “MailChimp”
Statistical survey and analyzes
The newsletters contain a so-called “web-beacon”, i. a pixel-sized file that is retrieved from the MailChimp server when the newsletter is opened. This call will initially collect technical information, such as information about the browser and your system, as well as your IP address and time of retrieval. This information is used to improve the technical performance of services based on their specifications or audience and their reading habits, based on their locations (which can be determined using the IP address) or access times. Statistical surveys also include determining if the newsletters will be opened, when they will be opened and which links will be clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our desire nor that of MailChimp to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
Online call and data management
(for the European area).
4. Processing of personal data in the context of contractual and personal services
Personal data will also be processed, for example, when requesting coachings, trainings, seminars, trainings, workshops, conferences, webinars, conferences, lectures, BarCamps, etc., the registration for our newsletter or for another customer account, for media or other orders or in case of questions by contact or by e-mail notify or these are used for other services as well as own advertising purposes. When you submit a contact request, your input for conducting a legal transaction / fulfillment of the contract will result in personal data, such as personal information. IP-address, name, first name, interest, address, contact details (email, telephone numbers). The exact data collected can easily be traced using the respective input masks.The deletion of any customer account is possible at any time by cancellation or message to us. The specified data will be stored by us and used to process the desired legal transaction. We use the data provided by you without your separate consent only for the necessary fulfillment and processing of the services offered, for the purpose of fulfilling our contractual obligations and services in accordance with Art. Art. 6 para. 1 lit. b DSGVO. With complete processing of the services, your data will be blocked for further use and deleted after expiry of the tax and commercial storage periods, unless you have expressly consented to the further use of your data or any other legal justification exists. The user will be informed of the scope of any consent that may be granted in connection with the registration for the respective service and that the consent will be recorded. The content of the given consent is made available to the user within the service for retrieval. If you do not give your consent, we ask for your understanding that you may not be able to attend the respective service.
6. Note about web analytics services
Based on our legitimate interests within the meaning of Art. 6 para. 1 lit. For DSGVO we use the following web analysis services to analyze and optimize our offers:
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be truncated by Google beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading the browser plug-in available under the following link and install.
As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from entering this website in the future (this opt-out cookie only works in this browser and only for this domain, delete your cookies in this browser, you must click this link again): Disable Google Analytics
7. General notes for the use of Facebook, Google+, Twitter and Instagram, Youtube, Xing and Linkedin
Based on our legitimate interests within the meaning of Art. 6 para. 1 lit. For DSGVO we use the following plugins to analyze and optimize our offers: On our website so-called social plugins (“plugins”) of the social networks Facebook and Google+, the microblogging services Twitter and Instagram are used. These services are provided by the companies Facebook Inc., Google Inc., Twitter Inc. and Instagram LLC. offered (“provider”).
Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). An overview of the plugins of Facebook and their appearance can be found here: https://developers.facebook.com/docs/plugins
Google+ is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). An overview of the plugins of Google and their appearance can be found here: https://developers.google.com/+/web/
Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”). An overview of the Twitter buttons and their appearance can be found here:
If you do not want Google, Facebook, Twitter or Instagram to directly map the data collected via our website to your profile in the relevant service, you must log out of the relevant service before visiting our website. You can completely prevent the plugins from being loaded even with add-ons for your browser. Eg with the script blocker “NoScript” (http://noscript.net/
8. Services and content of third parties, transfer and transmission of data
- Web hosting and email providers:
- Payment processors:
- Customer Relationship Management:
9. Data security
In order to prevent unauthorized access or disclosure, to ensure the accuracy of the data and to ensure the legitimate use of the data, we have set up technical and organizational procedures to safeguard and protect the information we collect online. We secure our website and other systems by technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons. There is an encrypted transfer of data between your browser and our server. Your personal data will be encrypted in an order process via SSL encryption over the Internet. Credit card data is not stored, but collected and processed directly by our payment service providers. Access to your customer account is only possible after entering your personal password. You should always keep your access information confidential and close the browser window when you stop communicating with us, especially if you share your computer with others.
10. Possibilities to contact
As far as a contact form is available in our web offers, this can be used for electronic contact. Alternatively, contact via the provided e-mail address is possible. If the data subject contacts us via one of these channels, the personal data you provide will be automatically saved. The storage serves solely for purposes of processing or contacting the person concerned. A transfer of data to third parties does not take place. Routine deletion and blocking of personal data The personal data will be deleted or blocked as soon as the purpose of the storage is omitted. In addition, such storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which we are responsible. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
Specifically, this means:
If we process the personal data on the basis of a consent to data processing (Article 6 (1) (a) GDPR), the processing ends with your revocation, unless there is another legal ground for the processing of the data, which is the case, if, at the time of the revocation, we are still entitled to process your data for the purpose of the performance of the contract or if the processing of the data is necessary to safeguard our legitimate interests. If we process the data by way of exception on the basis of our legitimate interests (Art. 6 (1) lit., DSGVO) within the scope of a previously made consideration, we will store the data until the legitimate interest no longer exists, the consideration comes to a different result or you comply Art. 21 DSGVO have effectively filed an objection (cf the visually highlighted “reference to special right of objection” below).
If we process the data for the execution of the contract, for example, because you have placed an order with us, then we will store the data until the contract has been finally fulfilled and settled and no claims can be asserted from the contract, ie until the statute of limitations.
The general limitation period under § 195 BGB is three (3) years. Certain claims, such as claims for damages, become time-barred after 30 years. If there is a justified reason to assume that this is relevant in individual cases, we will store the personal data over this period. The aforementioned periods of limitation commence at the end of the year (ie on 31.12.) In which the claim has arisen and the creditor should have become aware of the circumstances giving rise to the claim and the person of the debtor or would have obtained it without gross negligence.
We point out that in addition we also have legal storage obligations from u.a. are subject to commercial, tax and accounting reasons. These require us to keep records of our records, including personal information, for a period of six (6) to ten (10) years. These retention periods take precedence over the abovementioned deletion obligations. The retention periods also begin at the end of each year, ie on 31.12.
11. Rights of the data subject
If personal data is processed by you, you are “concerned” and you have the following rights towards us as the person responsible. Each data subject has the right to information under Article 15 of the GDPR, the right of correction under Article 16 GDPR, the right to cancellation under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR.
With regard to the right to information and the right to erase, the restrictions under §§ 34 and 35 BDSG apply. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 DSGVO i.V.m. § 19 BDSG).
You may revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent that were given to us prior to the validity of the General Data Protection Regulation, ie before 25 May 2018. Please note that the revocation only works for the future. Processing that occurred before the revocation is not affected.
You may ask the person in charge to confirm if personal data concerning you is processed by us. If such processing is available, you can request information from the person responsible about the following information:
1. the purposes for which the personal data are processed;
2. the categories of personal data that are processed;
3. the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
4. the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
5. the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
6. the existence of a right of appeal to a supervisory authority;
7. all available information on the source of the data if the personal data are not collected from the data subject;
8. the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved, and the scope and intended impact of such processing on the affected party
You have the right to request information about whether your personal information relates to a third country or an international organization.
In this connection, you can request the appropriate guarantees in accordance with. Art. 46 GDPR in connection with the transfer.
Right to rectification
You have a right to rectification and / or completion to the controller, if the personal data you process is incorrect or incomplete. The responsible person must make the correction without delay.
Right to restriction of processing
You may request the restriction of the processing of your personal data under the following conditions:
1. if you deny the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal information;
2. the processing is unlawful and you refuse the deletion of the personal data and instead demand the restriction of the use of the personal data;
3. the person responsible no longer needs the personal data for the purposes of the processing, but you need them for the assertion, exercise or defense of legal claims, or
4. if you have filed an objection against the processing according to 21 Par. 1 GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State. If the limitation of the processing after the o.g. If conditions are restricted, you will be informed by the person in charge before the restriction is lifted.
Right to delete
You may require the controller to delete your personal information without delay, and the controller is required to delete that information immediately if one of the following is true:
1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
2. You revoke your consent, to which the processing acc. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. DSGVO and there is no other legal basis for
3. You place, gem. Art. 21 para. 1 DSGVO objection to the processing and there are no prior justifiable reasons for the processing, or you lay gem. Art. 21 para. 2 DSGVO Opposition to processing
4. Your personal data have been processed unlawfully.
5. The deletion of personal data concerning you is required to fulfill a legal obligation under Union or national law, which is the responsibility of the person responsible.
6. The personal data concerning you were provided in relation to information society services offered pursuant to Art. 8 (1) GDPR.
If the person in charge has made the personal data concerning you public and is acc. Article 17 (1) of the GDPR, it shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you have been identified as being affected, taking into account available technology and implementation costs The person requesting the deletion of all links to such personal data or of copies or replications of such personal data.
The right to erasure does not exist if the processing is necessary
1. to exercise the right to freedom of expression and information;
2. to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to carry out a task which is in the public interest or in the exercise of official authority delegated to the controller;
3. for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
4. for archival purposes of public interest, scientific or historical research purposes or for statistical purposes Article 89 (1) GDPR, to the extent that the law referred to in paragraph 1 is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
5. to assert, exercise or defend legal claims.
Right to information
If you have the right of rectification, erasure or restriction of processing to the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort. You have a right to the person responsible to be informed about these recipients.
Right to data portability
You have the right to receive personally identifiable information you provide to the controller in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that
1. the processing on a consent Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a DS-GMO or on a contract acc. Art. 6 para. 1 lit. b DSGVO is based and
2. Processing using automated procedures
In exercising this right, you also have the right to obtain that your personal data relating to you are transmitted directly from one person responsible to another person responsible, as far as this is technically feasible. Freedoms and rights of other persons may not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
Right to objection
You have the right, at any time, to object to the processing of your personal data relating to the processing of the personal data concerning you pursuant to Article 6 (1) (e) or (f) of the GDPR for reasons arising from your particular situation; this also applies to profiling based on these provisions. The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
Right to revoke the data protection consent declaration
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. Automated decision on an individual basis including profiling. You have the right not to be subjected to a decision based solely on automated processing that has legal effects on it or, in a similar manner, significantly affects it.
This does not apply if the decision
1. is required for the conclusion or performance of a contract between you and the controller,
2. is permitted by Union or Member State legislation to which the controller is subject, and where such legislation contains appropriate measures to safeguard your rights and freedoms and legitimate interests, or
3. with your express consent
However, these decisions may not be based on specific categories of personal data under Art. 9 (1) GDPR, unless Art. 9 (2) (a) or (g) applies and appropriate measures are taken to protect the rights and freedoms and your legitimate interests were. Regarding the in a. and c. In the above-mentioned cases, the person responsible shall take appropriate measures to safeguard the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express his or her own position and to contest the decision.
Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State of its place of residence, employment or the place of the alleged infringement, if you believe that the processing of your personal data is contrary to the GDPR contrary. The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.
Right of objection according to Article 21 DSGV
Case-specific right of objection
You have the right at any time, for reasons arising out of your particular situation, to prevent the processing of personal data relating to you which, on the basis of Article 6 (1) lit. e DSGVO (Data Processing in the Public Interest) and Article 6 (1) lit. f DSGVO (data processing on the basis of a balance of interests), an objection is filed. If you object, we will no longer process your personal information unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.
Right to object to the processing of data for direct marketing purposes
In individual cases, we process your personal data in order to operate direct mail. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising.
12. Disclosure of data to third parties
13. Duration of storage of personal data
We process and store your personal information as long as it is necessary for the fulfillment of our contractual and legal obligations. Personal data is therefore stored for the duration of the respective statutory retention period. If the data is no longer required for the fulfillment of contractual or legal obligations, these are regularly deleted, unless their – temporary – further processing is necessary for the following purposes:
Fulfillment of commercial and tax-related retention obligations: In particular, the Commercial Code (HGB) and the Tax Code (AO) are to be mentioned. The deadlines for storage and documentation are two to ten years.
Preservation of evidence in the context of the statutory statute of limitations. According to §§195ff. of the Civil Code (BGB) these limitation periods can be up to 30 years, whereby the regular limitation period is three (3) years.
14. Questions and hints
Date August 2018