top of page
Header_Website_BW.png

 

Privacy Policy

​​

1. Overview of Data Protection

 
General Information

 

The following information provides an overview of what happens to your personal data when you visit this website. Personal data refers to any data that can be used to personally identify you.

Detailed information on data protection can be found in the full privacy policy below.

Data Collection on This Website

 

Who is responsible for data collection?


Data processing on this website is carried out by the website operator. Contact details can be found in the section “Controller Information” below.

 

How do we collect your data?

 

Your data is collected in part by you providing it to us. This may, for example, be data you enter into a contact form.

Other data is collected automatically or after your consent when you visit the website by our IT systems. This is primarily technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

 

What do we use your data for?

We use your data:

  • to ensure the proper functioning of the website

  • to analyze user behavior

  • to process inquiries, contracts, or service requests

 

Your rights

 

You have the right to:

  • request information about your stored personal data

  • request correction or deletion

  • withdraw consent at any time

  • request restriction of processing

  • lodge a complaint with a supervisory authority

 

You may contact us at any time regarding these rights.

 

2. Hosting

 

This website is hosted by:

WIX

Provider: Wix.com Ltd., Tel Aviv, Israel

WIX is used to build and host this website. When you visit the site, WIX may collect:

  • user behavior

  • traffic sources

  • visitor location

  • usage statistics

WIX uses cookies necessary for:

  • website functionality

  • security

Data may be stored on servers worldwide, including in the United States.

Further details:


https://www.wix.com/about/privacy

Data transfers are based on:

  • EU Standard Contractual Clauses

  • or equivalent safeguards under Art. 46 GDPR

 

Legal Basis:

Processing is based on:

  • Art. 6(1)(f) GDPR (legitimate interest in reliable website operation)

  • or Art. 6(1)(a) GDPR (consent, where applicable)

  • §25 TDDDG for cookies/device access

 

Consent can be withdrawn at any time.

WIX participates in the EU-US Data Privacy Framework (DPF), ensuring compliance with EU data protection standards.

3. General Information and Mandatory Disclosures

 

Data Protection

 

We treat your personal data confidentially and in accordance with applicable data protection laws.

Please note that data transmission over the Internet (e.g. email communication) may have security vulnerabilities.

Controller Information

 

The controller responsible for data processing is:


Felix Goral

Zeller Straße 31
77654 Offenburg
Germany

Phone: +49-(0)-1573-3718910
Email: Felix[at]Grundstein[dot]art

Data Retention

 

Your personal data is stored only as long as necessary for the purpose for which it was collected.

Data will be deleted:

  • upon request

  • after withdrawal of consent

  • unless legal retention obligations apply

Legal Bases for Data Processing

 

We process personal data based on:

  • consent (Art. 6(1)(a) GDPR)

  • contract performance (Art. 6(1)(b) GDPR)

  • legal obligations (Art. 6(1)(c) GDPR)

  • legitimate interests (Art. 6(1)(f) GDPR)

Special categories of data are processed only with explicit consent (Art. 9 GDPR).

Data Recipients

 

Personal data may be shared with third parties:

  • where necessary for contract fulfillment

  • where legally required

  • where legitimate interests apply

Processors are bound by data processing agreements.

Withdrawing Consent

 

You may withdraw your consent at any time with effect for the future.

Right to Object (Art. 21 GDPR)

 

YOU HAVE THE RIGHT TO OBJECT TO DATA PROCESSING BASED ON LEGITIMATE INTEREST AT ANY TIME.

IF YOUR DATA IS PROCESSED FOR DIRECT MARKETING, YOU CAN OBJECT AT ANY TIME.

Right to Lodge a Complaint

 

You have the right to lodge a complaint with a supervisory authority in your country of residence, workplace, or place of the alleged infringement.

Right to Data Portability

 

You have the right to receive your data in a structured, machine-readable format or to request transfer to another controller.

Access, Rectification, and Erasure

You have the right to:

  • access your data

  • correct inaccurate data

  • request deletion

Right to Restrict Processing

 

You may request restriction of processing:

  • while accuracy is being verified

  • if processing is unlawful

  • if data is needed for legal claims

  • pending objection resolution

 
SSL/TLS Encryption

 

This website uses SSL/TLS encryption to protect data transmission. You can recognize an encrypted connection by “https://” in your browser.

4. Data Collection on This Website

 

Purpose of Cookies

 

Cookies are used to:

  • ensure website functionality

  • improve user experience

  • analyze usage

Legal Basis

Cookies are stored based on:

  • Art. 6(1)(f) GDPR (legitimate interest)

  • or Art. 6(1)(a) GDPR (consent)

You can withdraw consent at any time.

Cookie Control

 

You can configure your browser to:

  • notify you about cookies

  • allow cookies only in specific cases

  • block cookies

  • delete cookies automatically

Disabling cookies may limit website functionality.

 
Contact Form

 

When you submit an inquiry through our contact form, the information you provide, including your contact details, will be stored for the purpose of processing your request and handling any follow-up questions. This data will not be shared with third parties without your consent.

Processing is carried out in accordance with Article 6(1)(b) GDPR (performance of a contract), Article 6(1)(f) GDPR (legitimate interest), or Article 6(1)(a) GDPR (consent), as applicable.

 

Your data will be retained until you request its deletion, withdraw your consent, or the purpose for processing no longer applies, subject to any applicable legal retention requirements

 
Email, Phone, Fax Inquiries

 

If you contact us via email, phone, or fax, your inquiry, including all resulting personal data, will be stored and processed for the purpose of handling your request. This data will not be shared without your consent.

Processing is based on the same legal grounds as those described for the contact form. Your data will be retained until you request deletion, withdraw your consent, or the purpose for processing ceases to apply, subject to statutory retention obligations.

 

5. Plugins and Tools

 
YouTube (Enhanced Privacy Mode)

 

Our website embeds videos from YouTube, a service provided by Google Ireland Limited (“Google”), using enhanced privacy mode.

In this mode, YouTube does not set cookies; however, local storage elements may still be used that can process personal data. If you are logged into your YouTube account, Google may associate your viewing activity with your personal profile. You can prevent this by logging out of your YouTube account before visiting our website.

Using YouTube in enhanced privacy mode helps ensure that your data is not used for personalized advertising.

Data processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR or, where applicable, your consent pursuant to Article 6(1)(a) GDPR and Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG). You may withdraw your consent at any time.

Google is certified under the EU–US Data Privacy Framework.

 
Google reCAPTCHA (Translation)

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to determine whether data entered on this website (e.g., in a contact form) is provided by a human user or by an automated program. To do this, reCAPTCHA analyzes user behavior based on various characteristics. This analysis begins automatically as soon as a visitor accesses the website.

For this purpose, reCAPTCHA evaluates various types of information (e.g., IP address, time spent on the website, or user interactions such as mouse movements). The data collected during this analysis is transmitted to Google.

The analysis is performed entirely in the background, and users are not explicitly notified that it is taking place.

The storage and analysis of this data are based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its services from abusive automated access and spam. If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting). Consent may be withdrawn at any time.

For more information, please refer to Google’s Privacy Policy and Terms of Service:

 

Google is certified under the EU–US Data Privacy Framework (DPF), which ensures compliance with European data protection standards when personal data is processed in the United States. More information is available at:


https://www.dataprivacyframework.gov/participant/5780

 

Source:

https://www.e-recht24.de/

bottom of page