Data protection statement
1. Data protection at a glance
General information
The following information provides a basic overview of what happens to your personal data when you visit this website. Personal data are all the data with which you can be personally identified. You can find detailed information about data protection in the data protection statement included below this text.
Collecting data on this website
Who is responsible for collecting the data on this website?
Data processing on this website is carried out by the website operator. You can find its contact details in the About the responsible agency section in this data protection statement.
How do we collect your data?
First of all, we collect your data when you notify us of it. This may involve data that you enter in a contact form, for example.
Other data are automatically collected or with your consent by our IT systems when you visit our website. These are primarily technical details (such as your Internet browser, operating system or the time you view the site). Collecting the data is done automatically as soon as you enter the site.
What do we use your data for?
Some of the data is collected to ensure the website is working flawlessly. Other data may be used to analyse your user behaviour.
What rights do you have with regards to your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of the data. If you have given your consent to have your data processed, you can revoke this consent at any time for the future. You also have the right under certain circumstances to request that the processing of your personal data be restricted. Furthermore, you have the right to submit a complaint to the supervisory authority responsible.
If you have questions about this or other data protection issues, please contact us at any time.
Analysis tools and tools provided by third-parties
When you visit this website, your surfing behaviour may be statistically evaluated. This is carried out mainly by what are known as analysis programmes
You can find detailed information about these analysis programmes in the following data protection statement.
2. Hosting
We host the content of our website at the following provider.
External hosting
This website is hosted externally. The personal data that are collected on this website are stored on the hoster’s or hosters’ servers. This may consist mainly of IP addresses, contact requests, meta and communication data, contractual data, contact details, names, website accesses and other data generated via a website.
External hosting takes place for the purpose of fulfilling the contract with our potential and existing customers (art. 6 para. 1 lit. b GDPR) and in the interest of providing a secure, fast and efficient online service by a professional provider (art. 6 para. 1 lit. f GDPR). If a relevant consent has been requested, processing is carried out exclusively on the basis of art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG (Telecommunications Telemedia Data Protection Act), as well as including the consent to store cookies or access to information on the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time.
Our hoster/s will only process your data to the extent required to fulfil their specified service obligations and will follow our instructions with regard to the data.
We use the following hoster/s:
Loswebos.de GmbH
Tschaikowskistr. 21
04105 Leipzig
3. General remarks and mandatory information
Data protection
The operators of these sites take the protection of your personal data very seriously. We treat your personal data confidentially and in line with the statutory data protection provisions and this data protection statement.
Whenever you use this website, a variety of personal data will be collected. Personal data are data with which you can be personally identified. This data protection statement explains which data we collect and what we use them for. It also explains how and for what purpose this occurs.
We wish to point out that data transfers on the Internet (e.g. when communicating by email) may involve security gaps. Complete protection of data from access by third parties is not possible.
Note about the agency responsible
The agency responsible for data processing on this website is
Pontis Social Impact GmbH
Rheinstrasse 9
65189 Wiesbaden
Phone: +49 160 7412564
Email: info@pontis-social-impact.de
The agency responsible is the natural or legal person, who alone or together with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.)..
Storage duration
Unless a more specific storage duration has been determined within this data protection statement, your personal data will remain with us until the purpose of the data processing no longer applies. If you assert a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted, unless we have other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these grounds are no longer applicable.
General remarks about the legal basis for data processing on this website
Insofar as you have consented to data processing, we shall process your personal data based on art. 6 para. 1 lit. a GDPR or art. 9 para. 2 lit. a GDPR, if special data categories are processed in accordance with art. 9 para. 1 GDPR. In the event that you have given your express consent to have your personal data transferred to third countries, data processing also takes place based on art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information on your end device (e.g. via device fingerprinting), data processing is also carried out based on § 25 para. 1 TTDSG. You can withdraw your consent at any time. If your data are required to fulfil the agreement or to carry out pre-contractual actions, we shall process your data based on art. 6 para. 1 lit. b GDPR. Moreover, we shall process your data if they are required to fulfil a legal obligation based on art. 6 para. 1 lit. c GDPR. Data processing may also take place based on our legitimate interest in accordance with art. 6 para. 1 lit. f GDPR. The following paragraphs of this data protection statement provide information about the relevant legal basis in each of the individual cases.
Note on transfer of data to the United States and other third countries
Among other things, we use tools from companies based in the United States or other countries that are not secure third countries under data protection law. Whenever these tools are active, your personal data may be transferred to these third countries and processed there. We wish to point out that in these countries no level of data protection that is comparable to that of the EU can be guaranteed. For example, US companies are obliged to surrender personal data to security authorities without you as the data subject being able to take legal action against them. Therefore, it is impossible to rule out that the United States authorities (such as secret services) can process, analyse and permanently store your data located on US servers for surveillance purposes. We have no influence on these processing activities.
Withdrawal of your consent to data processing
Many data processing procedures are only possible with your express consent. You can withdraw the consent you have already given at any time. The legality of the data processing that has taken place before your withdrawal remains unaffected by your withdrawal.
Right to object to collection of data in particular cases plus direct marketing (art. 21 GDPR)
If the data processing is carried out based on art. 6 para. 1 lit. e or f GDPR, you have the right at any time to lodge an objection to the processing of your personal data for reasons that arise from your particular situation; this also applies to profiling based on these provisions. You can find the respective legal basis on which the processing is based in this data protection statement. If you lodge an objection, we shall no longer process your personal data in question unless we can show evidence of compelling reasons for processing requiring protection that outweigh your interests, rights and freedoms or the processing’s purpose is to assert, exercise or defend legal claims (objection in accordance with art. 21 para. 1 GDPR).
If your personal data are processed to carry out direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such advertising or promotion; this also applies to profiling, insofar as it is associated with such direct marketing. If you object, your personal data will then no longer be used for direct marketing purposes (objection in accordance with art. 21 para. 2 GDPR).
Right to complain to the supervisory authority responsible
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state where they normally reside, their place of work or the place where the alleged breach occurs. The right to lodge a complaint exists notwithstanding other administrative or judicial remedies.
Right to data portability
You have the right to have data that we process automatically based on your consent or in fulfilling a contract, handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible individual, this will only be carried out if it is technically feasible.
Information, deletion and correction
Within the context of the applicable legal provisions, you have the right at any time to receive information free of charge about your stored personal data, its origin and recipients and the purpose of the data processing and if necessary a right to have the data corrected or deleted. You can contact us at any time if you have questions about this or any others about personal data issues.
Right to restriction of processing
You have the right to request a restriction of the processing of your personal data. Contact us with regard to this at any time. The right to a restriction of processing exists in the following cases.
- If you dispute the correctness of your personal data that we have stored, we normally require some time to review this. While this examination is under way, you have the right to request that the processing of your personal data be restricted.
- If the processing of your personal data has occurred/is occurring unlawfully, you can request the restriction of the data processing instead of deletion.
- If we no longer require your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request that the processing of your personal data be restricted instead of deleted.
- If you have lodged an objection in accordance with art. 21 para. 1 GDPR, a fair assessment between your interests and ours must be carried out. As long as it has not been determined whose interests predominate, you have the right to request that the processing of your personal data be restricted.
If you have restricted the processing of your personal data, these data – apart from their storage – may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or of a member state.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the site operators, this site uses SSL or TLS encryption. You can identify an encrypted link by the fact that the browser’s address line changes from http:// to https:// and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you send us cannot be read by third parties.
4. Data collection on this website
Cookies
Our web pages use what are known as cookies. Cookies are small data packages and they do no damage to your end device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.
Some cookies from third-party companies may be stored on your end device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (such as cookies to process payment services).
Cookies have different functions. Many cookies are technically required as certain website features would not work without them (e.g. the shopping basket function or displaying videos). Other cookies are used to evaluate user behaviour or to display advertising.
Cookies that are needed to carry out the electronic communication process, to provide specific functions you request (e.g. for the shopping basket function) or to optimise the website (e.g. cookies to measure the web audience) are stored based on art. 6 para. 1 lit. f GDPR, unless a different legal basis is stated. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimised provision of its services. If consent to have cookies stored and comparable recognition technologies have been requested, the processing takes place exclusively on the basis of this consent (art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); the consent can be withdrawn at any time.
You can set your browser in such a way that you are informed about setting cookies and only allow cookies in individual cases, to exclude the acceptance of cookies in certain cases or exclude them in general as well as to activate the automatic deletion of cookies when you close your browser. If you deactivate cookies, the functions of this website may be restricted.
If cookies are used by third-party companies or for analysis purposes, we will inform you of this separately as part of this data protection statement and request your consent, if necessary.
Consent with Borlabs cookie
Our website uses the consent technology of the Borlabs cookie to obtain your consent to store certain cookies in your browser or to use certain technologies and to document these as compliant with data protection. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg (hereinafter Borlabs).
When you enter our website, a Borlabs cookie is stored in your browser, which in turn stores the consent you have given or the withdrawal of your consent. These data are not forwarded to the Borlabs cookie provider.
The collected data are stored until you ask us to delete them or the Borlabs cookie itself or the purpose of storing the data no longer applies. Compulsory legal retention periods remain unaffected. You can find details of data processing by the Borlabs cookie at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
Borlabs cookie consent technology is used to obtain the legally required consent to employ cookies. The legal basis for this is art. 6 para. 1 lit. c GDPR.
Enquiries by email, phone or fax
If you contact us by email, phone or fax, your enquiry including all your personal data (name, request) that are generated from it will be stored and processed for the purpose of dealing with your concern. We do not disclose your data to anyone without your consent.
Your data are processed based on art. 6 para. 1 lit. b GDPR if your request is associated with the fulfilment of a contract or is required to carry out any precontractual measures. In any other cases, the processing is based on our legitimate interest in dealing effectively with the requests submitted to us (art. 6 para. 1 lit. f GDPR) or on your consent (art. 6 para. 1 lit. a GDPR) if this was requested; you can withdraw your consent at any time.
The data you have sent to us via contact requests remain with us until you ask them to be deleted, withdraw your consent to store them or the purpose of storing the data no longer applies (e.g. after your concern has been dealt with). Compulsory legal provisions – in particular statutory retention periods – remain unaffected.
5. Analysis tools and advertising
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour of website visitors. As such, the website operator handles various types of user data, such as page views, duration of stay, operating systems used and the user’s origin. The data are assigned to the user’s respective end device. No assignment to a user ID is made.
Furthermore, we can use Google Analytics, for example, to record your mouse and scroll movements and clicks. Google Analytics also uses different modelling approaches to supplement the collected datasets and employs machine learning technologies in its data analysis.
Google Analytics uses technologies that enable the user to be recognised for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is normally transmitted to and stored on a Google server in the United States.
The use of this service is based on your consent in accordance with art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. You can withdraw your consent at any time.
The transfer of data to the United States is based on the standard contractual terms of the EU Commission. You can find details at https://privacy.google.com/businesses/controllerterms/mccs/.
Browser Plugin
You can prevent your data from being collected and processed by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
You can find out more about how Google Analytics deals with user data in Google’s data protection statement at https://support.google.com/analytics/answer/6004245?hl=de.
Order processing
We have concluded an order processing agreement with Google and fully implement the strict regulations of the German data protection authorities when using Google Analytics.
6. Plugins and tools
Wordfence
We have integrated Wordfence on this website. The provider is Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter Wordfence).
Wordfence is used to protect our website from unwanted access or malicious cyber-attacks. For this purpose, our website creates a permanent connection with Wordfence servers so that Wordfence can cross-check its databases against those on our website and block them if necessary.
We use Wordfence based on art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting his website from cyber-attacks as effectively as possible. If a consent to this has been requested, processing is carried out exclusively on the basis of art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, if the consent includes the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG. You can withdraw your consent at any time.
The transfer of data to the United States is based on the standard contractual clauses of the EU Commission. You can find details at https://www.wordfence.com/help/general-data-protection-regulation/.
