1.1 We are delighted that you have decided to visit our website. Thank you for your interest in our business. The text that follows is our policy for processing your personal data associated with your use of our website. Personal data is any data that could be used to identify you as an individual.
1.2 The data controller within the scope of the General Data Protection Regulation (GDPR) is Graubner Projektentwicklung GmbH & Co. KG, Schätzendorfer Straße 15, 21272 Egestorf, phone +49 4175 80 21 0, fax +49 4175 80 21 21, email address: firstname.lastname@example.org. The data controller is the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 For security purposes and in the interests of protecting personal data and other confidential data being transmitted (e.g. orders and enquiries sent to the data controller), this website uses SSL and/or TLS encryption. You can be confident that a connection is encrypted when you see “https://” and the lock symbol in your browser bar.
If you simply browse our website and do not register or send us any other information, we will only collect data that your browser sends to our server (server log files). When you visit our website, we collect the following data that is technically required in order for you to be able to access our website:
– The pages of our website you visited
– The date and time of your visit
– The volume of data transmitted in bytes
– The link that directed you to our website
– Your browser
– Your operating system
– Your IP address (possibly anonymised)
The legal basis for us processing this data is our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 (1) (f) of the GDPR. This data is not forwarded or used in any other way. We do, however, reserve the right to refer back to the server log files if there is a specific reason to suspect unlawful use.
If personal data is processed by individual cookies implemented by us, the legal basis is our legitimate interest in optimising the functionality of our website and providing our customers with a positive website experience in accordance with Art. 6 (1) (f) of the GDPR.
We sometimes work with advertising partners who help us to tailor our website to your interests. For this purpose, cookies are also stored by our partners on your hard drive (third-party cookies) when you visit our website. If we are working with advertising partners in this way, we will inform you specifically about the use of any such cookies and the scope of the data collected in the paragraphs that follow.
Please note that you can update your browser settings so that you are informed when cookies are going to be stored and given the option to accept or reject them on a case-by-case basis. You can also decide to accept or reject cookies for all or specific websites. The cookie settings are different for each browser. Refer to the help menu for your browser to find out how to change the cookie settings. You can use these links for the different browsers here:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
You should bear in mind that you may not be able to use the full functionality of our website if you do not accept the cookies.
We collect your personal data when you make contact with us (e.g. via our contact form or by email). You can easily see which data will be collected from a contact form. This data will only be stored and processed for the purposes of responding to your enquiry, contacting you and performing the associated digital admin. The legal basis for processing this data is our legitimate interest in responding to your enquiry in accordance with Art. 6 (1) (f) of the GDPR. If you made contact with us for the purpose of entering into a contract, the legal basis for processing your personal data is provided by Art. 6 (1) (b) of the GDPR. Your personal data will be deleted once we have processed your enquiry if it is obvious that the matter has been fully resolved and there is no legal requirement to store the data.
5.1 With respect to the processing of personal data by the controller, the data subject has extensive rights (rights to information and intervention) under the applicable data protection regulations as outlined below:
– Right of access by the data subject (Art. 15 GDPR): You have in particular the right to obtain information about any of your personal data being processed by us, the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data has been or will be disclosed, the envisaged period for which the personal data will be stored or the criteria used to determine that period, the existence of the right to request rectification or erasure of personal data or restriction of processing or to object to such processing, the right to lodge a complaint with a supervisory authority, any available information as to the source of the personal data (where it is not collected from you by us), the existence of automated decision-making, including profiling, and any meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing and the right to be informed of the appropriate safeguards pursuant to Article 46 of the GDPR relating to the transfer of your data to a third country.
– Right to rectification (Art. 16 GDPR): You have the right to have inaccurate personal data concerning you that we are storing rectified without undue delay and the right to have incomplete personal data concerning you that we are storing completed.
– Right to erasure (Art. 17 GDPR): You have the right to obtain from the controller the erasure of your personal data where one of the grounds stipulated in Art. 17 (1) of the GDPR applies. This right does not apply, however, to the extent that processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
– Right to restriction of processing (Art. 18 GDPR): You have the right to obtain restriction of processing of your personal data where the accuracy of the personal data is contested by you, for a period enabling the controller to verify the accuracy of the personal data, the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead, we no longer need the personal data for the purposes of the processing, but it is required by you for the establishment, exercise or defence of legal claims or you have objected to processing on grounds relating to your particular situation pending the verification whether our legitimate grounds override yours.
– Right to notification (Art. 19 GDPR): If you have exercised your right to rectification, erasure or restriction of processing with respect to the data controller, they are obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.
– Right to data portability (Art. 20 GDPR): You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
– Right to withdraw consent (Art. 7 (3) GDPR): You have the right to withdraw your consent to your data being processed at any time with future effect. If you withdraw your consent, the personal data concerned will be deleted immediately unless there is a legal basis allowing for it to continue being processed without the need for consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
– Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): If you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority without prejudice to any other administrative or judicial remedy, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
5.2 Right to object
WHERE WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO THAT PROCESSING WITH FUTURE EFFECT.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING YOUR PERSONAL DATA. WE WILL CONTINUE TO PROCESS YOUR PERSONAL DATA, HOWEVER, IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
WHERE YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS OUTLINED ABOVE.
IF YOU EXERCISE THIS RIGHT TO OBJECT, WE WILL STOP PROCESSING YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES.
The length of time for which personal data is stored is based on the applicable statutory retention period (e.g. retention periods under commercial and tax law). At the end of the retention period, the data will be routinely deleted provided that it is no longer required to fulfil or initiate a contract and/or we have no legitimate interest in continuing to store it.