With the following data protection declaration, we would like to inform you about which types of your personal data (hereinafter also referred to as “data”) we process for what purposes and to what extent. The data protection declaration applies to all processing of personal data carried out by us, both in the context of the provision of our services and in particular on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as “online offer”).
The terms used are not gender-specific.
As of September 14, 2020
Britta de Clercq
CEO and Owner of Frühförder- I Therapiezentrum de Clercq GmbH,
Frühförder- I Therapiezentrum de Clercq GmbH
E-mail address: firstname.lastname@example.org
The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.
In the following, we inform you of the legal bases of the General Data Protection Regulation (GDPR), on the basis of which we process the personal data. Please note that in addition to the provisions of the GDPR, the national data protection requirements may apply in your or our country of residence and domicile. If, in addition, more specific legal bases are decisive in individual cases, we will inform you of these in the data protection declaration.
National data protection regulations in Germany: In addition to the data protection regulations of the General Data Protection Regulation, national regulations on data protection apply in Germany. This includes, in particular, the Act on the Protection against Misuse of Personal Data in Data Processing (Federal Data Protection Act – BDSG). In particular, the BDSG contains special provisions on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes and transmission as well as automated decision-making in individual cases, including profiling. Furthermore, it regulates data processing for the purposes of the employment relationship (§ 26 BDSG), in particular with regard to the establishment, implementation or termination of employment relationships as well as the consent of employees. Furthermore, state data protection laws of the individual federal states can be applied.
In accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.
Measures shall include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to the data, as well as access, input, disclosure, ensuring availability and their separation. Furthermore, we have set up procedures that ensure the exercise of data subject rights, the deletion of data and reactions to the threat to the data. Furthermore, we take into account the protection of personal data already during the development or selection of hardware, software and procedures in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.
SSL encryption (https): In order to protect your data transmitted via our online offer, we use SSL encryption. You can recognize such encrypted connections by the prefix https:// in the address bar of your browser.
As part of our processing of personal data, it happens that the data is transmitted to other bodies, companies, legally independent organizational units or persons or that it is disclosed to them. The recipients of this data may include payment institutions in the context of payment transactions, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such a case, we observe the legal requirements and conclude corresponding contracts or agreements with the recipients of your data that serve to protect your data.
Data transfer within the organization:: We may transfer personal data to other entities within our organization or grant them access to this data. If this transfer takes place for administrative purposes, the transfer of the data is based on our legitimate business and business interests or takes place if it is necessary to fulfil our contractual obligations or if there is a consent of the persons concerned or a legal permission.
Cookies are text files that contain data from websites or domains visited and are stored by a browser on the user’s computer. A cookie is primarily used to store the information about a user during or after his visit within an online offer. The stored information may include for example, the language settings on a website, the login status, a shopping cart or the place where a video was watched. The term cookies also includes other technologies that perform the same functions as cookies (e.B. when user information is stored on the basis of pseudonymous online identifiers, also referred to as “user IDs”)
The following cookie types and functions are distinguished:
Storage period: If we do not provide you with explicit information on the storage period of permanent cookies (i.e. as part of a so-called cookie opt-in), please assume that the storage period can be up to two years.
In order to be able to provide our online offer securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers managed by them) the online offer can be retrieved. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services, as well as security and technical maintenance services.
The data processed in the context of the provision of the hosting offer may include all information concerning the users of our online offer that arises in the context of use and communication. This regularly includes the IP address, which is necessary to be able to deliver the content of online offers to browsers, and all entries made within our online offer or from websites.
E-mail sending and hosting: The web hosting services used by us also include the sending, receiving and storage of e-mails. For these purposes, the addresses of the recipients and senders as well as other information regarding the e-mail dispatch (i.e. the providers involved) as well as the contents of the respective e-mails are processed. The aforementioned data may also be processed for the purposes of detecting SPAM. Please note that e-mails on the Internet are generally not sent encrypted. As a rule, e-mails are encrypted in transit, but (unless a so-called end-to-end encryption method is used) not on the servers from which they are sent and received. We can therefore assume no responsibility for the transmission path of the e-mails between the sender and the receipt on our server.
Collection of access data and logfiles: We ourselves (or our web hosting provider) collect data on each access to the server (so-called server log files). The server log files may include the address and name of the accessed websites and files, date and time of retrieval, data transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider.
The server log files can be used on the one hand for security purposes, i.e. to avoid overloading the servers (especially in the case of abusive attacks, so-called DDoS attacks) and on the other hand to ensure the utilization of the servers and their stability.
When contacting us (i.e. via contact form, e-mail, telephone or via social media), the details of the requesting persons will be processed insofar as this is necessary to answer the contact requests and any requested measures.
The answer to contact requests in the context of contractual or pre-contractual relationships takes place to fulfil our contractual obligations or to answer (pre)contractual inquiries and otherwise on the basis of the legitimate interests in answering the inquiries.
We integrate functional and content elements into our online offer that are obtained from the servers of their respective providers (hereinafter referred to as “third-party providers”). These may be, for example, graphics, videos or social media buttons as well as contributions (hereinafter uniformly referred to as “content”).
The integration always requires that the third-party providers of this content process the IP address of the users, since without the IP address they could not send the content to their browser. The IP address is therefore required for the presentation of this content or functions. We endeavor to use only such content whose respective providers use the IP address only to deliver the content. Third parties may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user’s device and contain, among other things, technical information about the browser and the operating system, to referring websites, the time of visit and other information on the use of our online offer as well as be combined with such information from other sources.
Services and service providers used:
The data processed by us will be deleted in accordance with the legal requirements as soon as their consents permitted for processing are revoked or other permissions are omitted (i.e. if the purpose of the processing of this data has ceased to exist or they are not necessary for the purpose).
If the data is not deleted because it is necessary for other and legally permissible purposes, their processing will be limited to these purposes. This means that the data will be blocked and not processed for other purposes. This applies, for example to data that must be stored for commercial or tax reasons or whose storage is necessary for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person.
Further information on the deletion of personal data can also be provided in the context of the individual data protection information of this data protection declaration.
As a data subject, you are entitled to various rights under the GDPR, which result in particular from Articles 15 to 21 GDPR: