Privacy Policy

Responsible within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is: SOMA Handels GbR, Haldesdorfer Str. 138, 22179 Hamburg.

Your rights as a data subject

Our Company would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

  • Information about your data stored by us and their processing (Art. 15 DSGVO),
  • Correction of incorrect personal data (Art. 16 GDPR),
  • Deletion of your data stored by us (Art. 17 GDPR),
  • Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
  • Objection to the processing of your data by us (Art. 21 GDPR) and
  • Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can revoke it at any time with effect for the future.

You can contact a supervisory authority with a complaint at any time, e.g. to the responsible supervisory authority of the federal state of your place of residence or to the authority responsible for us as the responsible body.

A list of the supervisory authorities (for the non-public area) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

 

Collection of general information when you visit our website

 

Type and purpose of processing:

When you access our website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically recorded. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like.

In particular, they are processed for the following purposes:

  • Ensuring a problem-free connection to the website,
  • Ensuring a smooth use of our website,
  • Evaluation of system security and stability as well as
  • for further administrative purposes.

We do not use your data to draw conclusions about you personally. Information of this kind may be statistically evaluated by us in order to optimize our website and the technology behind it.

Legal basis:

Processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website.

Recipient:

The recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period:

The data will be deleted as soon as they are no longer required for the purpose of the survey. For the data used to provide the website, this is generally the case when the respective session has ended.

Provision required:

The provision of the aforementioned personal data is not required by law or by contract. Without the IP address, however, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or restricted. For this reason, no contradiction is possible.

 

Contact form

 

Type and purpose of processing:

The data you enter will be stored for the purpose of individual communication with you. To do this, it is necessary to provide a valid email address and your name. This is used to assign the request and then answer it. The specification of further data is optional.

Legal basis:

The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 Para. 1 lit. f GDPR).

By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.

If you contact us to inquire about an offer, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 Para. 1 lit.b GDPR).

Recipient:

The recipients of the data may be contract processors.

Storage period:

Data will be deleted no later than 6 months after the request has been processed.

If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code and delete your data after these periods have expired.

Provision required:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, your e-mail address and the reason for the request.

 

Use of Google Analytics

 

Art und Zweck der Verarbeitung:

This website uses Google Analytics, a web analysis service from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses so-called “cookies”, meaning text files that are saved on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Based on the use of the website and the Internet, other related services are then to be provided.

Legal basis:

The data is processed on the basis of the user’s consent (Art. 6 Para. 1 lit. a GDPR).

Recipient:

The recipient of the data is Google as the processor. We have concluded the corresponding order processing contract with Google for this purpose.

Storage period:

The data is deleted as soon as it is no longer required for our recording purposes.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

Provision required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.

Revocation of consent:

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Browser add-on to deactivate Google Analytics.

Profiling:

With the help of the tracking tool Google Analytics, the behavior of visitors to the website can be evaluated and interests analyzed. To do this, we create a pseudonymous user profile.

 

Use of Google Maps

 

Type and purpose of processing:

We use Google Maps on this website. Google Maps is operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function.

You can find more information about data processing by Google inthe Google data protection information. There you can also change your personal data protection settings in the data protection center.

Detailed instructions for managing your own data in connection with Google products can be found here.

Legal basis:

The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).

Recipient:

When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. This happens regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account.

If you do not want the assignment in your Google profile, you must log out of Google before activating the button. Google saves your data as a usage profile and uses it for advertising, market research and / or needs-based design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.

Storage period:

We do not collect any personal data through the integration of Google Maps.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

Revocation of Consent:

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you cannot use our website or can only use it to a limited extent.

Provision required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.

 

 

SSL encryption

In order to protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) over HTTPS.

 

 

Changes to our data protection regulations

We reserve the right to adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply to your next visit.

The data protection declaration was created with the help of activeMind AG (Version #2019-04-10).