In this data protection declaration we (Envolved GmbH) inform you about the processing of personal data when using our website.
1. Contact person
The contact person and so-called person responsible for the processing of your personal data when you visit this website in accordance with the basic EU data protection regulation (GDPR) is
Phone +49 (0) 89 3 56 47 12-00
Fax: +49 (0) 89 3 56 47 12-01
If you have any questions regarding data protection in connection with the use of our website, you can also contact our data protection officer at any time. Our data protection officer can be reached at the above postal address and at the e-mail address previously provided (keyword: "data protection officer").
2. Data processing on our website
2.1 Access to our website / access data
Every time you use our website, we collect the access data that your browser automatically transmits to enable you to visit the website. The access data includes in particular:
- IP address of the requesting device,
- Date and time of the request,
- Address of the called website and the inquiring website,
- Information about the browser and operating system used,
- Online IDs (e.g. device IDs, session IDs).
The data processing of this access data is necessary to enable the visit of the website and to guarantee the permanent functionality and security of our systems. The access data is also temporarily stored in internal log files for the purposes described above in order to produce statistical data on the use of our website, to further develop our website with regard to the usage habits of our visitors (e.g. if the proportion of mobile devices with which the pages are accessed increases) and to generally maintain our website administratively. The legal basis is Art. 6 paragraph 1 sentence 1 lit. f) GDPR.
The information stored in the log files does not allow any direct conclusion to your person - in particular, we only store the IP addresses in abridged, anonymised form. The log files are stored for 30 days and archived after subsequent anonymization.
2.2 Google Maps
Our website uses the map service Google Maps of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). In order for the Google map material we use to be integrated and displayed in your web browser, your web browser must connect to a Google server, which may also be located in the United States, when you visit the contact page. In the event that personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield. Google receives the information that the contact page of our website has been accessed from the IP address of your device. The legal basis is Art. 6 paragraph 1 sentence 1 f GDPR, based on our legitimate interest in integrating a card service to contact us.
If you access the Google Maps service on our site while logged into your Google profile, Google may also link this event to your Google profile. If you do not wish to be associated with your Google profile, you must log out of Google before visiting our contact page. Google stores your data and uses it for the purposes of advertising, market research and personalised presentation of Google Maps. You may object to this data collection by Google.
2.3. myFonts Counter
Our website uses MyFonts Counter, a web analysis service of MyFonts Inc. 500 Unicorn Park Drive, Woburn, MA 01801, USA. In order to be able to integrate the fonts used on the website, a page view tracking is carried out in accordance with the license regulations, whereby the number of visits to the website is counted for statistical purposes and transmitted to MyFonts. MyFonts collects pseudonymised and anonymised data. The legal basis for this is Art. 6 paragraph 1 sentence 1 f GDPR based on our interest in an appealing presentation of our website.
Further information on data protection and the cookies used can be found online at: http://www.myfonts.com/info/terms-and-conditions/#Privacy
3. Passing on of data
The data collected by us will only be passed on if:
- you have given your express consent pursuant to Art. 6 paragraph 1 sentence 1 lit. a GDPR,
- the disclosure pursuant to Art. 6 paragraph 1 sentence 1 lit. f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
- we are legally obliged pursuant to Art. 6 paragraph 1 sentence 1 lit. c GDPR to pass on or
- this is legally permissible and is required under Art. 6 paragraph 1 sentence 1 lit. b GDPR for the processing of contractual relationships with you or for the implementation of pre-contractual measures that are taken at your request.
In addition, data may be disclosed in connection with official inquiries, court orders and legal proceedings if it is necessary for legal prosecution or enforcement.
4. Storage period
In principle, we only store personal data for as long as necessary to fulfil contractual or statutory obligations for which we have collected the data. Afterwards we delete the data immediately, unless we need the data until the end of the statutory limitation period for purposes of proof for civil law claims or due to statutory retention obligations.
5. Your rights
You have the right to request information about the processing of your personal data by us at any time. We will explain the data processing and provide you with an overview of the data stored about you. If data stored with us is incorrect or no longer up-to-date, you have the right to have this data corrected. You may also request that your data be deleted. If, in exceptional cases, deletion is not possible due to other legal regulations, the data will be blocked so that it is only available for this legal purpose. You may also have the processing of your data restricted, e.g. if you believe that the data we have stored is incorrect. You also have the right to data transferability, i.e. we will send you a digital copy of the personal data you have provided on request.
To exercise your rights as described here, you may contact the above contact person at any time. This also applies if you wish to receive copies of guarantees to prove an adequate level of data protection.
In addition, you have the right to object to data processing based on Art. 6 paragraph 1 lit. e or f GDPR. Finally, you have the right to complain to our data protection supervisory authority. You may exercise this right before a supervisory authority in the Member State in which you are staying, working or place of alleged infringement. The responsible supervisory authority is located in Munich, the headquarters of (Envolved GmbH): Bavarian Data Protection Authority (BayLDA), Promenade 27, 91522 Ansbach.
6. Right of revocation and objection
In accordance with Article 7 (2) GDPR, you have the right to revoke your consent to us at any time. As a result, we will not continue processing data based on this consent in the future. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.
If we process your data on the basis of legitimate interests pursuant to Art. 6 paragraph 1 lit. f GDPR, you have the right under Art. 21 GDPR to object to the processing of your data and to give us reasons which arise from your particular situation and which in your opinion indicate that your interests worthy of protection predominate. If you object to data processing for direct marketing purposes, you have a general right of objection, which we will implement without giving reasons.
If you would like to make use of your right of revocation or objection, an informal message to the above-mentioned contact person is sufficient.
7. Changes to the data protection declaration
We may update this privacy statement from time to time, for example when we adapt our website or legal or regulatory requirements change.
Status: May 2018