Data Protection Officer
SmartMunk GmbH
Theaterstr. 67
52062 Aachen datenschutz@dialego.de
For website visitors
Data processed for providing the website and creating log files
What data is processed and for what purpose?
Each time content on the website is accessed, data that may allow identification is temporarily stored. The following data is collected:
Date and time of access
IP address
Hostname of the accessing computer
Website from which the website was accessed
Websites accessed via the website
Page visited on our website
Message indicating whether the request was successful
Amount of data transmitted
Information about the browser type and the version used
Operating system
Temporary storage of the data is required for the process of your website visit in order to provide the website. Further storage in log files takes place in order to ensure the functionality of the website and the security of the information technology systems. These purposes also constitute our legitimate interest in data processing.
On what legal basis is this data processed?
The data is processed on the basis of Art. 6(1)(f) GDPR.
Are there any other recipients of the personal data besides the controller?
The website is hosted by SmartMunk GmbH, Theaterstr. 67, info@smartmunk.com. The host receives the above-mentioned data as a processor.
How long is the data stored?
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of providing the website, this is the case when the respective session has ended. The log files are stored for a maximum of 24 hours and are directly accessible only to administrators. After that, they are only indirectly available through the reconstruction of backup tapes and are permanently deleted after a maximum of 3 months.
Notice regarding Google Analytics (consent & withdrawal)
If you have consented to the use of Google Analytics in the cookie banner, we use this tool to analyze the use of our website and improve our offering. Processing is carried out on the basis of your consent (Art. 6(1)(a) GDPR).
You can withdraw your consent at any time with effect for the future by opening the
cookie settings
and disabling the “Analytics” category.
For users of the contact form
Data processing for contact inquiries
What data is processed and for what purpose?
If you contact us via the contact form, we process the information you provide
(e.g., name, email address and the content of your message) in order to handle
your request and communicate with you. In addition, technical information such
as the date and time of the request as well as your IP address may be processed
to prevent misuse (e.g., spam).
On what legal basis is this data processed?
Depending on the content of your inquiry, processing is carried out on the basis
of Art. 6(1)(b) GDPR (pre-contractual measures / performance of a contract) or
Art. 6(1)(f) GDPR (legitimate interest in the efficient handling of contact
inquiries and prevention of misuse).
Are there any other recipients of the personal data besides the controller?
The content submitted via the contact form is transmitted as an email to our
mailboxes and processed in our email system. For this purpose, we use
Microsoft Office 365 (Exchange Online) as a processor. Appropriate data
processing agreements in accordance with Art. 28 GDPR are in place with the
service provider.
How long is the data stored?
We store the data from your inquiry for as long as necessary to process your
request. The data will then be deleted unless statutory retention obligations
prevent this or further storage is required for the establishment, exercise
or defense of legal claims.
Are you required to provide this data?
Providing your data is voluntary. However, without the required information
(in particular a way to contact you), we may not be able to process your request.
Your rights as a data subject
Right of Access
You may request information in accordance with Art. 15 GDPR about your personal data that we process.
Right to Object
You have the right to object for reasons arising from your particular situation (see Right to Object pursuant to Art. 21(1) GDPR).
Right to Rectification
If the information concerning you is not (or no longer) accurate, you may request rectification in accordance with Art. 16 GDPR. If your data is incomplete, you may request that it be completed.
Right to Erasure
You may request the erasure of your personal data in accordance with Art. 17 GDPR.
Right to Restriction of Processing
In accordance with Art. 18 GDPR, you have the right to request restriction of the processing of your personal data.
Right to Lodge a Complaint
If you believe that the processing of your personal data violates data protection law, you have the right under Art. 77(1) GDPR to lodge a complaint with a data protection supervisory authority of your choice. This also includes the data protection supervisory authority responsible for the controller: State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, https://www.ldi.nrw.de/kontakt/ihre-beschwerde.
Right to Data Portability
If the conditions of Art. 20(1) GDPR are met, you have the right to receive the data that we process automatically based on your consent or in fulfillment of a contract and to have it provided to you or to third parties. The collection of data for providing the website and the storage of log files are strictly necessary for the operation of the website. They are therefore not based on consent pursuant to Art. 6(1)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR but are justified under Art. 6(1)(f) GDPR. Accordingly, the requirements of Art. 20(1) GDPR are not met in this respect.
Right to Object pursuant to Art. 21(1) GDPR
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data that is based on Art. 6(1)(f) GDPR. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise or defense of legal claims. The collection of data for providing the website and the storage of log files are strictly necessary for the operation of the website.
