Privacy policy

This Privacy Policy is based on the statutory provisions protecting your data, in particular the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016). The German Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG) also apply.

The controller within the meaning of Art. 24 GDPR is:

Alicja Wilczek, trading as EASY DATENSCHUTZ, Kolberger Str. 7, 40599 Düsseldorf, Germany

Email: info@easydatenschutz.com, phone: +49 (0) 211 / 50 66 99 45

This Privacy Policy explains which personal data are stored, processed and disclosed when you visit our website, in what manner and for what purposes.

Personal data within the meaning of Art. 4(1) GDPR means any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to that person's physical, physiological, genetic, mental, economic, cultural or social identity.

When our website and related services are accessed and used, subcontractors or affiliated companies may transfer data to third countries such as the United States. Processing is based on the EU–US adequacy decision of 10 July 2023. We also minimise risk, wherever possible, by entering into data processing agreements where a processing relationship exists and by using standard contractual clauses together with the effective supplementary measures required by supervisory authorities.

Server data

When you visit our website, various server statistics transmitted by your browser to our provider's server are stored automatically. Every access to our website and every retrieval of a file stored on it are logged. The storage serves internal system-related and statistical purposes. The following are logged: name of the retrieved file, date and time of retrieval, amount of data transferred, confirmation of successful retrieval, web browser and requesting domain. The IP addresses of requesting devices are also logged in anonymised form.

These data are used for statistical evaluation of visits to our website and cannot be attributed by us to specific persons. They are not combined with other data sources. The data allow us to improve our offering, for example by preventing access from malicious websites or optimising access for particular browsers; logging the IP address also enables delivery of the website to the visitor. The data are automatically deleted after 14 days for the purposes described above.

We use a secure server with TLS (Transport Layer Security) and 128/256-bit encryption to transmit your data. This ensures that your data are transmitted securely and cannot be read by unauthorised persons.

STRATO (hosting)

We use the STRATO web-hosting service operated by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO enables us to maintain the domain under which we publish our website. We also use STRATO's email system, cloud and servers. The data collected and the purposes of collection and storage are described above under ‘Server data’. Our legitimate interest is to make this website available on the internet.

We have entered into a data processing agreement with STRATO, under which the company assures and documents compliance with appropriate technical and organisational measures. Further information is available in STRATO's privacy policy at https://www.strato.de/datenschutz/.

Use of our own cookies for functional purposes

Our website uses cookies in certain places. A cookie is text information placed by our website on the device you use via your web browser. Cookies help make our offering more user-friendly, effective and secure. We use session cookies only; they are deleted automatically when your visit ends. You can prevent your browser from accepting cookies, although this may impair some functionality.

LinkedIn (social network)

For communication with clients and general information about our business, we maintain an account on www.linkedin.com, operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (‘LinkedIn’). If you open LinkedIn through the icon on our website while logged in to your account, LinkedIn may directly associate your visit to our website with your LinkedIn account. If you do not want LinkedIn to associate your data with your account, log out of LinkedIn before visiting our website. When you use interactive features such as liking, commenting, sharing or messaging, a LinkedIn login screen appears. After logging in, LinkedIn can identify you as a specific user.

Further information is available in LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy. You can review the privacy settings in your LinkedIn account and enable the ‘block third-party cookies’ setting in your browser. Blocking cookies may restrict some website functionality.

Our legitimate interest in maintaining a LinkedIn account is to present our business on social networks and acquire clients. By maintaining a LinkedIn account and, where applicable, interacting with it, you consent to LinkedIn storing and using your data. You may withdraw your consent at any time by deleting all cookies stored in your browser. You can also prevent collection by disabling the automatic setting of cookies in your browser settings.

Contact form

When you use our contact form, we collect and store your name and email address to respond to your enquiry. Providing a telephone number is voluntary. Before sending your enquiry, you give us your explicit consent by ticking the box below the contact form.

If the enquiry leads to a contractual relationship or relates to an existing contract, processing is based on Art. 6(1)(b) GDPR because the data are necessary to perform pre-contractual or contractual obligations. The data are deleted when the purpose of storage no longer applies, meaning after your contact-form enquiry has been answered or the related matter has been finally resolved. If an existing or subsequent contractual relationship applies, deletion takes place after the statutory retention periods have expired.

Contract administration

For contract administration and invoicing, we collect and store the personal data you provide, such as your name, address and email address. If you have already provided these data in connection with your registration, we will use them for the stated contract-administration purposes. For billing purposes, data may be shared with tax advisers and banks. Billing data are also transmitted to the tax authorities in accordance with tax-law requirements pursuant to Art. 6(1)(c) GDPR. These data are deleted once the applicable statutory retention obligations expire. Where no statutory retention obligation applies, the data are deleted when the purpose ceases to exist.

a. Right to object, Art. 21 GDPR

Where we process your data to protect legitimate interests under Art. 6(1)(f) GDPR, you may object on grounds relating to your particular situation. We will then stop processing your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. If you object to processing for direct-marketing purposes, the data will no longer be processed for that purpose.

b. Right of access, Art. 15 GDPR

You have the right to obtain confirmation as to whether we process personal data concerning you and, where that is the case, access to those data and related information under Art. 15(1)(a)–(h) GDPR.

c. Right to rectification, Art. 16 GDPR

You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. Taking the purposes of processing into account, you also have the right to have incomplete personal data completed, including by providing a supplementary statement.

d. Right to erasure, Art. 17 GDPR

You have the right to obtain the erasure of personal data concerning you without undue delay, and we are obliged to erase such data without undue delay where one of the grounds in Art. 17 GDPR applies.

e. Right to restriction of processing, Art. 18 GDPR

You have the right to obtain restriction of processing where one of the conditions in Art. 18 GDPR applies.

f. Right to data portability, Art. 20 GDPR

You have the right to receive personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit those data to another controller where processing is based on consent under Art. 6(1)(a) or Art. 9(2)(a), or on a contract under Art. 6(1)(b), and processing is carried out by automated means.

g. Right to lodge a complaint, Art. 77 GDPR

If you believe that the processing of your personal data infringes data protection law, you may lodge a complaint with a competent supervisory authority.

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, P.O. Box 20 04 44, 40102 Düsseldorf, phone: 0211/38424-0, fax: 0211/38424-10, email: poststelle@ldi.nrw.de

h. Right to withdraw consent, Art. 7(3) GDPR

Where processing of your personal data is based on consent, you have the right to withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. You may withdraw consent informally, for example by emailing info@easydatenschutz.com.