Privacy notice

I. Privacy notice

We are glad that you have visited our website. We respect your privacy. Data protection and data security of those who use our website is a priority for us. With this Privacy Notice, we want to inform you about the extent to which data is collected when you use our website and the purposes for which we use this data. The Privacy Notice also informs you about your rights in this regard.

 

a. Nature and purpose of data processing

When you simply visit our website, without registering or otherwise sharing any personal data, information of general nature is automatically collected. The collected data (server log files) includes the type of browser, the operating system used, the domain name of your Internet service provider, and your IP address. This information is strictly anonymous and can not be used to indentify visitors. The information is processed, in particular to:

  • Ensure that the website connection is established without problems,
  • Ensure a smooth user experience on our website,
  • Evaluate system security and stability, and
  • for other administrative purposes.

We do not use the collected data to try to identify visitors. Information of this kind is statistically evaluated, if necessary, to optimize our online presence and the technology behind it.

 

b. Lawful basis for data processing

Pursuant to Article 6(1)(f) GDPR, the lawful basis for processing is our legitimate interest to improve the stability and functionality of our website.

 

c. Data categories

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of computer
  • Time of server request.

 

d. Recipients of data

Recipients of data are employees of our company, and, where applicable, third party data processors responsible for the operation and maintenance of our website.

 

e. Data retention period

Collected data shall be deleted as soon as it is no longer needed for the purpose of collection. Data collected and used for the operation of the website is therefore deleted as soon as the respective session has ended. f. Legal / contractual requirement Provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website can not be guaranteed. In addition, certain services and functions may be unavailable or limited. g. Data transfer to third countries No data processing shall take place outside the European Union (EU) or the European Economic Area (EEA).

 

II. Controller

RBO Rechnungswesen Beratungs- und Outsourcing GmbH
Anne Kopunovic (Owner and Managing Director)
Unter den Eichen 5
65195 Wiesbaden Germany
Telephone: +49 (0) 611 – 505059 – 0
E-Mail: info@rbo-online.eu

 

III. External data protection officer

Krüger Law Office
Edith Krüger, attorney
Bahnhofstraße 44-46
65185 Wiesbaden Germany
Telephone: 01635566200
E-Mail: ek@datenschutz-krueger.de

IV. Data security

The personal data of everyone who has a contractual, pre-contractual or other relationship with our company deserves special protection. Our goal is to adhere to the highest standards of data protection. Therefore we are committed to the continuous development of our data protection and data security approach. We protect your privacy and keep your personal data confidential. To prevent manipulation, loss or misuse of your data, we take various technical and organizational security measures that are regularly reviewed and fine-tuned according to the latest technologies. That includes the use of recognized encryption methods (SSL and TLS). Please note, however, that due to the nature of the Internet, it is possible that data protection rules and the above-mentioned security measures are ignored by third parties or institutions, outside our sphere of responsibility. In particular, data shared or disclosed in an unencrypted manner, e.g. by e-mail, can be easily accessed by third parties. Technically we have no influence on this. Therefore it is the responsibility of users to protect the data provided by them against misuse by encryption or otherwise.

 

V. Rights of Data Subjects

Pursuant to GDPR, you are a Data Subject because your personal data is processed by another person or entity. Data subjects have the following rights vis-à-vis the Controller:

  • Right of access (Art. 15 GDPR)
  • Right of correction or deletion of personal data (Art. 16 and 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to notification regarding correction or deletion of personal data or restriction of processing (Art. 19 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. (Art. 7(3) GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

 

VI. Right to be informed (right of access)

GDPR gives individuals a right to be informed about the collection and use of their personal data. The right to be informed covers all data processed by us. The right can be exercised without any problems and at regular intervals so that data subjects are always aware of the processing of their personal data and can verify its lawfulness (see recital 63 GDPR). The right to be informed includes in particular the following information:

  • Purpose of processing
  • Categories of data
  • Recipients / categories of recipients, in particular international organizations or third countries (if any); if a third country is involved, the data subject shall furthermore have the right to obtain information on the appropriate safeguards related to the transfer of personal data.
  • If possible, the planned duration for which the personal data will be stored or if this is not possible, the criteria for determining this duration.
  • All available information on the source of the data, if the personal data is not collected directly from the Data Subject
  • All available information on automated decision making (if any), including profiling, pursuant to Article 22(1) and (4) GDPR
  • The right to
    • Correction or
    • Erasure of their personal data, or
    • Restriction of processing by the Controller or
    • object to such processing, and
    • lodge a complaint with a supervisory authority

If Data Subjects wish to exercise their right to be informed, they may contact us at any time using the contact details provided at the beginning of this Privacy Notice.

 

VII. Right to rectification

Data Subjects shall have the right to request our company to promptly correct any inaccurate personal data. Furthermore, Data Subjects shall have the right, taking into account the purposes of processing, to have their incomplete personal data completed – also by means of a supplementary declaration.

If Data Subjects wish to exercise their right to be informed, they may contact us at any time using the contact details provided at the beginning of this Privacy Notice.

 

VIII. Right to erasure

Data Subjects shall have the right to obtain from the Controller the erasure of their personal data (‘right to be forgotten’) without undue delay, where one of the following grounds applies, and provided that processing is not necessary:

  • The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  • The Data Subject withdraws consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a) GDPR, and where there is no other legal ground for the processing.
  • The Data Subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR.
  • The personal data have been unlawfully processed.
  • The personal data has to be erased for compliance with a legal obligation in EU or Member State law to which the Controller is subject.
  • The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

If any of the aforementioned grounds applies and a Data Subject wishes to have his/her personal data erased, he/she may contact us at any time using the contact details provided at the beginning of this Privacy Notice. Controller shall promptly arrange for the erasure of personal data, as requested.

 

IX. Right to restriction of processing

Data Subjects shall have the right to obtain from the Controller restriction of processing where one of the following applies:

  • The accuracy of the personal data is contested by the Data Subject, for a period enabling the Controller to verify the accuracy of the personal data.
  • The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
  • The Controller no longer needs the personal data for the purposes of the processing, but the Data Subject needs the data for the establishment, exercise or defense of legal claims.
  • The Data Subject has objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the Controller override those of the Data Subject.

If any of the aforementioned conditions apply and a Data Subject wishes to request the restriction of processing of personal data stored by the Company, the Data Subject may contact us at any time using the contact details provided at the beginning of this Privacy Notice. Controller shall promptly arrange for the restriction of processing, as requested.

 

X. Right to data portability

Data Subjects shall have the right to receive the personal data concerning them, which they have provided to a Controller, in a structured, commonly used and machine-readable format. They also have the right to transmit those data to another controller without hindrance from the Controller to which the personal data have been provided, where the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR; and the processing is carried out by automated means. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller. Furthermore, in exercising his or her right to data portability pursuant to Article 20(1) GDPR, the Data Subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible, provided that this shall not adversely affect the rights and freedoms of others. If Data Subjects wish to exercise their right to data portability, they may contact us at any time using the contact details provided at the beginning of this Privacy Notice.

 

XI. Right to object

The Data Subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on Article 6(1)(e) or 6(1)(f) GDPR, including profiling based on those provisions. The Controller shall no longer process the personal data unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the Data Subject or for the establishment, exercise or defense of legal claims. Where personal data are processed for direct marketing purposes, the Data Subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. This also applies to profiling, insofar as it is associated with such direct advertising. Where the Data Subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes. In addition, where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, the Data Subject, on grounds relating to his or her particular situation, shall have the right to object to processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest. If Data Subjects wish to exercise their right to object to processing, they may contact us at any time using the contact details provided at the beginning of this Privacy Notice.

 

XII. The right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, Data Subjects shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement if they consider that the processing of their personal data infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.

Our competent supervisory authority is:
The Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Telephone: 0611-1408 0
Fax: 0611-1408 611
E-mail: poststelle@datenschutz.hessen.de

 

XIII. Our right to modify the Privacy Notice

Due to changes in related laws or our internal company processes, it might be necessary to amend this Privacy Notice. Therefore we encourage you to review this document regularly. We reserve the right to change this Privacy Notice at any time, in compliance with data protection laws.

 

XIV. Processor

If, in the course of our processing, we share data with other persons and companies (processors, jointly responsible persons or third parties) or otherwise give them access to the collected data, this shall only be done on the basis of a legal permission (e.g. if a transfer of data to third parties, such as payment service providers, is necessary for the performance of the contract), with users’ consent, or if we are legally required to do so, or on the basis of our legitimate interest (e.g. when using contractors, web hosting services…etc.). If we disclose or transfer data to other companies in our company group or otherwise grant them access to collected data, this is done for administrative purposes as a legitimate interest and, in addition, on a basis that complies with the legal requirements. The following organizations, companies or persons have been commissioned by the operator of this website to process data:

Processors within the EU / EEA:
ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
D-02742 Friedersdorf
Telephone: +49 35872 353-10
Fax: +49 35872 353-30
E-Mail: info@all-inkl.com
https://all-inkl.com/

 

XV. Use of cookies

a. Nature and purpose of the processing

Similarly to many other websites, we also use so-called ‘cookies’.
Cookies are text files with small pieces of data that store information about our website and its use. These small files are created by the web browser automatically when visiting our website and stored locally on your computer. However, cookies do not allow direct identification of visitors. Cookies simply help make the use of our website and services easier and more comfortable for you.

 

There are two main types of cookies: strictly necessary cookies and non-essential cookies:

Strictly necessary cookies (‘first party cookies’)

Strictly necessary cookies are cookies that must be present to provide the basic functions of the website. These cookies are not permanently stored on your device and are erased when you close the browser. These are so-called session cookies.

 

We use the following, strictly necessary cookies:

 

Cookie, storage duration, Purpose

_gat_gtag_UA_120643939_1      Storage duration: 1 minute Purpose: Analysis / Statistics

 

These cookies allow us to count visitors and track traffic sources, thus we can measure and improve the performance of our website. This helps us determine which pages are the most and least visited and how visitors move around the site.

 

Non-essential cookies, on the other hand, are mostly functional cookies, i.e. performance cookies, marketing & third party cookies that allow, for example, the number of visitors and traffic sources to be recorded and counted in order to measure and improve the performance of the website. They are also used to detect if certain pages are experiencing problems or errors, which pages are the most popular, and how visitors navigate the site.

  • Functional cookies
    Functional cookies are used to store information entered by the user, e.g. user name or language selection, and to improve and personalize functions based on this information.
  • Performance cookies
    Performance cookies are used to track visits and individual activities on websites. They are used to record and statistically evaluate the use of website.
  • Marketing & Third Party Cookies
    Marketing & Third Party Cookies are used, among others, by advertising companies to collect information about the websites visited by the user so that they can show targeted advertisements to the user.

 

We use the following non-essential cookies:

 

_gid Storage duration: 24 hours Purpose: Analysis / Statistics

_ga Storage duration: 26 months Purpose: Analysis / Statistics

 

b. Lawful basis for data processing

Strictly necessary cookies (‘first party cookies’) can be used without the consent of user, where lawful basis for processing is legitimate interest in the operation and optimization of our website and services, pursuant to Art. 6(1)(f) GDPR. Use of non-essential cookies, such as functional cookies, performance cookies and marketing & third party cookies shall be subject to consent of the website user pursuant to Art. 6(1)(a) GDPR.

 

c. Data categories

  • IP address
  • Browser used
  • Operating system used
  • Internet connection
  • Cookie Session ID

 

e. Retention period

The user can set his web browser in such a way that the storage of cookies on his/her device is not allowed and is asked each time whether he/she agrees to the use of cookies. Stored cookies can be deleted by the user at any time. The ‘help’ function of the respective web browser describes in detail how to set cookie preferences.
Disabling all cookies may compromise the operation of this website and impact certain basic functions of the site.

 

f. Legal / contractual requirement

Collection of personal data via non-essential cookies shall be subject to your consent (cookie opt-in). You can also prevent the use of preconfigured and strictly necessary cookies (opt-out cookies) in your browser settings. However, without your consent to cookies, we can not guarantee the operation and functionality of our website. In addition, certain services and functions may be unavailable or limited.

 

g. Data transfer to third countries

No data processing shall take place outside the European Union (EU) or the European Economic Area (EEA).

 

h. Withdrawing consent

You can withdraw your consent to cookies at any time, with future effect, in your browser settings.

 

i. Automated decision making and profiling

As a responsible company, we do not use automated decision-making or profiling when collecting cookies.

 

XVI. Contact form

a. Nature and purpose of processing

The data you enter is stored for the purpose of individual communication with you. Therefore it is necessary to give a valid e-mail address and your name. The data is required for the assignment of the request and the subsequent reply to the same. Provision of additional data is optional.

 

b. Lawful basis for data processing

The processing of the data entered in the contact form is based on legitimate interest (Art 6(1)(f) GDPR). By using a contact form, we want to give you an easy way to contact us. The information you provide is stored for the purpose of processing the request and for possible follow-up questions. If you contact us to request a quote, the processing of data provided in the contact form is necessary for taking steps prior to entering into a contract Art 6(1)(b) GDPR).

 

c. Data categories

  • Name
  • Email
  • Topic
  • Your message

 

d. Recipients

Recipients of data are employees of our company, and, where applicable, third party data processors.

 

e. Retention period

Data shall be deleted no later than 6 months after processing the request. Should a contractual relationship arise, we must observe statutory retention periods set out in the German Commercial Code (HGB) and erase your data upon expiry of the retention periods.

 

f. Legal / contractual requirement

The provision of your personal data is voluntary. However, we can only process your request if you provide us your name, email address and the reason for the request.

 

g. Data transfer to third countries

No data processing shall take place outside the European Union (EU) or the European Economic Area (EEA).

 

h. Withdrawing consent

You can withdraw your consent to store your personal data at any time, with future effect. You can withdraw your consent at any time by contacting us via any of the contact options provided at the beginning of this Privacy Notice.

 

i. Automated decision making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

 

XVII. Google Maps

a. Nature and purpose of processing

This website uses the services provided by Google Maps. Google Maps is operated from Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. It allows us to show you interactive maps directly on the website and enables you to use the map function comfortably. You can find more information about data processing by Google in the Google Privacy notice. There you can also change your personal privacy settings in the Google Safety Center. By visiting the website, Google receives information that you have accessed the corresponding subpage of our website. It happens regardless of whether you are logged into a Google account. If you are logged in to your Google account, the data is directly assigned to your account. If you do not want the data assigned to your profile at Google, you must log out of Google before activating the button. Google stores your data as usage profiles and uses it for the purposes of advertising, market research and/or demand-oriented design of its website. Data is used in particular (even for users who are not logged in) for tailored advertising and to inform other users of social networking sites about your activities on our website. You have the right to object to the creation of these user profiles, but you have to contact Google to exercise this right.

 

b. Lawful basis for data processing

The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 (1)(a) GDPR).

 

c. Data categories

Usage data, connection data, location data

 

d. Recipients

Recipients of data are employees of our company, and Google as third party data processor.

 

e. Retention period

Data is processed only as long as the corresponding consent is available. Afterwards, the data is erased, provided that there are no legal retention obligations to the contrary. Should you need to contact us in this regard, please use the contact information provided at the beginning of this Privacy Notice.

 

f. Legal / contractual requirement

The provision of your personal data is voluntary, and based solely on your consent. Disabling access may result in functional restrictions on the website. g. Data transfer to third countries No data processing shall take place outside the European Union (EU) or the European Economic Area (EEA). h. Withdrawing consent If you do not want Google to collect, process or use data about you via our website, you can disable JavaScript in your browser settings. In this case, however, you may not be able to use our website or only to a limited extent. You can withdraw your consent to store your personal data at any time, with future effect. You can withdraw your consent at any time by contacting us via any of the contact options provided at the beginning of this Privacy Notice.

 

i. Automated decision making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.