Privacy Policy for a Website

Preface

We (hereinafter: "the Company," "we," or "us") take the protection of your personal data seriously and provide this Privacy Notice to inform you how your data is processed.

This Privacy Notice is modular. Section A applies generally, Section B applies specifically to website visits.

A. General

1. Definitions

Terms follow Art. 4 GDPR, e.g., "Personal data," "Processing," "Controller," "Processor," "Third party," "Consent".

2. Name and Address of the Controller

3. Data Protection Officer

We are not obliged to appoint a Data Protection Officer under Art. 37 GDPR.

4. Legal Bases for Processing

Processing is lawful only if covered by Art. 6 para. 1 lit. a–f GDPR.

5. Data Deletion and Storage Duration

Data is stored only as long as necessary unless legal retention obligations apply.

6. Data Security

Appropriate technical and organizational measures (e.g., TLS encryption) are implemented.

7. Cooperation with Processors

External service providers process data strictly under instructions in compliance with Art. 28 GDPR.

8. Transfer to Third Countries

Transfers outside the EEA occur only with adequate protection (e.g., SCCs, adequacy decisions).

9. Automated Decision-Making

No automated decision-making or profiling is performed.

10. No Obligation to Provide Personal Data

Providing personal data is voluntary, but some services may require it.

11. Legal Obligation to Transmit Data

We may be legally obliged to share personal data with public authorities (Art. 6 para. 1 lit. c GDPR).

12. Your Rights

Rights include access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority.

13. Changes to the Privacy Notice

Updates are made when necessary. Current version (December 2021): https://muehlenplaetzchen.de/

B. Visiting Websites

1. Function

Information about our company and services is available at https://muehlenplaetzchen.de/. Visiting may involve personal data processing.

2. Processed Personal Data

• Referrer URL
• Requested page (name and URL)
• Date and time of access
• Browser type, language, version
• IP address (anonymized)
• Transferred data volume
• Operating system
• Access status / HTTP status code
• Time zone (GMT)

3. Purpose and Legal Basis

Data is processed for statistics and to improve stability and security of the website. Legal basis: Art. 6 para. 1 lit. f GDPR.

4. Duration of Processing

Data is stored only as long as necessary for the stated purposes.

5. Transfer to Third Parties

Possible recipients: hosting and IT providers, public authorities, auditors, banks, insurers, legal advisors, regulators, business partners.

6. Use of Cookies, Plugins, and Services

a) Cookies: Technical, performance, advertising/targeting, and sharing cookies (max. 13 months). Non-essential cookies require explicit consent.

b) Social Media Plugins: No active plugins used. Icons are passive links.