Imprint

&Data Compliance GmbH
Wrangelstrasse 5
10997 Berlin

Mail: info@anddata.de
Tel: 030-809 502 810
Fax: 030-809 502 819

Managing director authorised to represent the company: Hans-Christian Widegreen

Register Court: Charlottenburg Local Court
Register No.: HRB 198377 B
VAT ID: 37/589/50254

Privacy policy

1. general information on the processing of personal data

(1) The protection of your personal data is of particular importance to us. In the following, we would therefore like to inform you in detail about which personal data is processed when you use our websites and offers.

(2) The responsible party pursuant to Art. 4 No. 7 of the General Data Protection Regulation ("DSGVO") is the

&Data Compliance GmbH
Wrangelstraße 5
10997 Berlin
Tel: 030-809 502 810
Fax: 030-809 502 819
E-mail: info@anddata.de

(hereinafter "We"). You can find further information in our imprint.

(3) We process personal data only in compliance with the relevant data protection provisions. This means that the data will only be processed if a legal permission exists. I.e., in particular if the data processing is necessary for the provision of our contractual services and online services or is required by law, consent has been given, as well as on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation and security of our online offer within the meaning of Art. 6 (1) lit. f DSGVO, in particular in the case of range measurement, creation of profiles for advertising and marketing purposes as well as collection of access data and use of the services of third-party providers).

(4) The legal basis for the consents is Art. 6 (1) lit. a and Art. 7 DSGVO, the legal basis for the processing for the fulfilment of our services and implementation of contractual measures is Art. 6 (1) lit. b DSGVO, the legal basis for the processing for the fulfilment of our legal obligations is Art. 6 (1) lit. c DSGVO, and the legal basis for the processing for the protection of our legitimate interests is Art. 6 (1) lit. f DSGVO.

2. data processing when visiting our websites

(1) In the case of purely informational use of our websites, i.e. if you do not make an enquiry or otherwise transmit personal information to us, we process the data that your browser transmits to our server and that is technically necessary to display our websites to you and to ensure stability and security:

(2) The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO, namely our legitimate interest in the presentation of the websites accessed.

3. data processing when contacting us

When you contact us by e-mail, telephone/fax or via a contact form, the data you provide (e.g. e-mail address, name, telephone number or also the content of the enquiry) is processed by us in order to answer your questions and/or process your request. The legal basis is Art. 6 para. 1 lit. b) DSGVO.

4. data processing for the execution of the contract

(1) If you commission us to provide consulting services, we process your contact and payment data as well as communication, contract and consulting data (e.g. the results of an audit) for the fulfilment, processing and invoicing of the contractual services. For the aforementioned purpose, your data may be passed on to service providers supporting us (service providers, operators of communication applications, etc.), which we have of course carefully selected and which are bound by our instructions. These are in particular technical service providers who support us in the provision of services.

(2) Should you merely request a quote from us, we will process your data from the enquiry in order to provide you with a quote and contact you.

(3) The legal basis is the existing or impending contractual relationship (Art. 6 para. 1 p. 1 lit. b DSGVO).

5. your rights

(1) You have the following rights with respect to your personal data:

(2) You also have the right to complain to the data protection supervisory authority about the processing of your data by us.

(3) We would like to point out that you can revoke any data protection consent you may have given us at any time with effect for the future. The same applies to consent for advertising. The best way to do this is to send an informal e-mail to: info@anddata.de. The respective revocation can lead to the fact that our offers can no longer be made available to you or can only be made available to you to a limited extent.

(4) Insofar as we base the processing of your personal data on a balancing of interests (Art. 6 (1) sentence 1 lit. f DSGVO), you may object to the processing. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the merits of the case and either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

6. disclosure of data to third parties and third-party providers

(1) We only disclose your data to third parties if this is necessary, e.g. on the basis of Art. 6 para. 1 lit. b) DSGVO for contractual purposes or can be justified on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f. DSGVO can be justified.

(2) If we use subcontractors to provide our services, we take appropriate legal as well as technical and organisational measures to ensure the protection of personal data in accordance with the relevant legal requirements.

7. data deletion

(1) The data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This applies, for example, to data that must be retained for reasons of commercial or tax law.

(2) According to legal requirements, storage is for six years pursuant to § 257 para. 1 HGB (commercial books, inventories, commercial letters, accounting vouchers, etc.) and for ten years pursuant to § 147 para. 1 AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).

8. statistical evaluation - tracking

We use tracking technology on our website to measure and evaluate our website and optimise our content. In order to protect our users and partners, we can also identify and prevent fraud and security risks. The legal basis for this data processing is our legitimate interest.

We use the web analytics service Matomo for our website in "device fingerprinting" mode (data transmission of the device you use to our web service). Matomo (www.matomo.org) does not use cookies in this mode! This also does not allow us to analyse the use of the websites by generating information about your user behaviour on our websites. We use the web analysis service Matomo for our website in the "device fingerprinting" mode (data transmission of the device used by you to our web service). Matomo (www.matomo.org) does not use cookies in this mode! This also does not allow us to analyse the use of the websites by generating information about your user behaviour on our websites. The information sent by "device fingerprinting" from your device is not passed on to third parties.

9. final provisions

(1) We use technical and organisational security measures to protect your data, in particular against accidental or intentional manipulation, loss, destruction or against attack by unauthorised persons. Our security measures are continuously improved in line with technological developments.

(2) We will update the data protection declaration from time to time due to the technical progress of our offers. Insofar as the change to the data protection declaration does not relate to the use of existing data, the new data protection declaration will apply from the date of its update on our website. A change to the data protection declaration that relates to the use of data already collected will only be made if it is reasonable for you. In such a case, we will notify you in good time by e-mail, on our websites, in our application or in another form. You have the right to object to the validity of the new data protection declaration within four weeks of receipt of the notification. In the event of an objection, we reserve the right to terminate the contractual relationship. If no objection is made within the aforementioned period, you will be deemed to have accepted the amended data protection statement. We will inform you of your right to object and the significance of the objection period in the notification.