Privacy Policy

Privacy policy (data protection information pursuant to Art. 13 GDPR)

1. name and contact details of the controller

The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is:

Regina Iglauer-Sander,
Erdmannstraße 6
10827 Berlin
Phone: 030/788904-64
Fax: 030/788904-65
Email: post@öffne-dein-herz.de

2. Rights of the data subject

2.1 You have the following rights with regard to the personal data concerning you:

Right of access,
Right to rectification or erasure,
Right to restriction of processing,
Right to object to processing,
right to data portability.

You have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

2.2 Right to object

a. The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

b. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.

c. If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

3. Individual data collection

3.1 Data collection when visiting the website

When using the website for information purposes only, i.e. if you do not provide us with any other information, we only collect the personal data that your browser transmits to our server.

When you view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

IP address
Date and time of the enquiry
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred in each case
Website from which the request originates
browser
Operating system and its interface
Language and version of the browser software.

a.) Purposes:

Purposes for which the personal data is to be processed:

Display of the website.

b.) Legal basis:

Legitimate interests pursuant to Art. 6 para. 1 f) GDPR.
The legitimate interests are:

Functionality, presentation, stability and security of the website.

c.) Categories of recipients of the personal data:

The web server is technically operated by a service provider (processor).

d.) Storage period:

1 week.

3.1.1 Transient cookies / session cookies (technically necessary cookies)

Necessary data storage includes cookies that are absolutely necessary for the functions of a website. These are, for example, cookies that are used to store log-in data, the shopping basket or language selection. These are deleted when the browser is closed.

a.) Purposes:

Purposes for which the personal data is to be processed:

Presentation of the website.

b.) Legal basis:

Legitimate interests pursuant to Art. 6 para. 1 f) GDPR.
The legitimate interests are:

Functionality, presentation, stability and security of the website.

c.) Categories of recipients of the personal data:

The web server is technically operated by a service provider (processor).

d.) Storage period:

Until the browser is closed.

3.1.2 Persistent cookies (which are not technically necessary)

Non-essential cookies are text files that are not used solely for the functionality of the website, but also collect other data. These include, for example, the following:

Tracking cookies
Targeting cookies
Analysis cookies
Cookies from social media websites

Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies in your browser's security settings at any time.
You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all functions of this website.

a.) Purposes:

Purposes for which the personal data is to be processed:

Identification during follow-up visits.

b.) Legal basis:

Consent for one or more specific purposes (Art. 6 para. 1 a) GDPR).

c.) Categories of recipients of the personal data:

Processor: The web server is technically operated by a service provider (processor).

d.) Storage period:

Until consent is withdrawn.

e.) Cancellation option:

You have the right to withdraw your consent at any time. Please inform the controller of this. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.