Privacy Notice

1. General

We take the protection of your personal data very seriously. Data are "processed" by us according to the valid legal data protection regulations, starting from 25.05.2018 in particular according to the European data protection basic regulation (in the following: DSGVO) as well as the country-specific data protection regulations. "Processing" means any process performed, with or without the aid of automated procedures, or any such process associated with personal data, such as collecting, collecting, organizing, organizing, storing, adapting or modifying, reading out, and querying Use, disclosure through transmission, dissemination or other form of provision, reconciliation or association, restriction, cancellation or destruction.

Below we inform you about the processing of your data, in particular about the nature, scope and purpose of the collection and use of your personal data when you visit our website and use our offers and services and the corresponding legal basis of the individual processing operations. In addition, we explain to you in the context of our privacy policy which rights you have with regard to data processing.

"Personal Data" means any information relating to an identified or identifiable natural person; a natural person is regarded as identifiable, which can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, the expression of the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.

2. Responsible body for data processing

We are the provider of our Internet services responsible for data processing. You can reach us under the following contact details:

Maitre Consult GmbH, Muthesiusstraße 6, D-12163 Berlin, Telefon: +49-30-770060080, E-Mail: service@maitre-consult.de.

3. Processing of your data

The nature, extent and purpose of the processing of your data differ according to whether you only visit our website or use the services and / or services offered by us:

a) Visit of our websites

When visiting our website, the server saves data in so-called server log files which your Internet browser automatically sends to the server, in particular:

- Date and time of retrieval of one of our websites

- Your browser type and the respective version of the browser

- the operating system used

- the last page visited by you (so-called Referrer URL)

- The transferred amount of data and the access status (file transfer, file not found etc.) as well as

- Your IP address and the requesting provider.

The processing of this data takes place in order to enable the use of the Internet pages you have accessed, for statistical purposes, to improve our internet presence and security against illegal cyber attacks, as well as to exercise, assert or ward off legal claims. Your IP address will only be stored for as long as necessary to exercise, assert or defend legal claims and to defend potential cyberattacks and to provide law enforcement with the information necessary for prosecution.

The above-mentioned data will be processed separately from all personal data that you provide to us when you visit our website and / or the use of a service or deliverables, and never merged.

As of 25.05.2018, this data processing described above has its legal basis in Article 6 (1) (b) of the GDPR for the implementation of necessary pre-contractual measures in order to enable you to use the Internet pages you have requested. If the above data are processed for statistical purposes, to improve our internet presence, to protect against unlawful cyber attacks, or to exercise, assert or defend legal claims, this will be done from 25.05.2018 on the legal basis of Art. 6 (1) f) of the GDPR. Our legitimate interest in this data processing lies in the evaluation of the data to improve our Internet offer, if necessary, to enforce, assert or defend against legal action and to protect our systems against illegal cyber attacks and, where appropriate, to prosecute law enforcement authorities.

b) Processing of personal data in the use of our services

Personal data will only be processed by us if this is permitted by law or if you consent to the processing of your personal data.

Insofar as you wish to make use of the services and services offered by us on our website, such as the ordering of goods, provision of services, ordering of vouchers or newsletters, it is necessary for you to provide further personal data. We process your personal data for the above purposes from 25.05.2018 on the legal basis of Article 6 paragraph 1 letter b) GDPR to fulfill a contract with you or to carry out the necessary pre-contractual measures, which are made on your request. The purpose of the processing of your personal data is therefore to process inquiries, to deliver goods ordered to you, to provide the desired service, to process a voucher order or to send you the desired newsletter or to allow you to use our blog and commenting functions. Without the provision of personal data, we can not conclude the contract with you and provide the services and services offered.

In addition, we process your data for the purpose of exercising, possibly asserting or preventing legal claims arising from the contractual relationship and, if necessary, allowing criminal prosecution authorities to prosecute. The above data processing will take place from 25.05.2018 on the legal basis of Art. 6 (1) (f) GDPR or partly on Article 6 (1) (c) GDPR in order to comply with a legal obligation to which we are subject. Our legitimate interest in this data processing is to be able to exercise, assert or defend legal claims arising from the contractual relationship and, if necessary, to allow prosecution authorities to prosecute them.

We also process your personal data for the purpose of fulfilling our statutory retention obligations. The legal basis for the fulfillment of our statutory storage obligations is standardized from 25.05.2018 in Article 6 paragraph 1 letter c) GDPR.

Your data will be forwarded to contract fulfillment or to carry out necessary pre-contractual measures, which are made on your request, if necessary, to our supporting service providers, which we have of course carefully selected. These can be technical service providers or service providers who assist us with the shipping or payment processing or the bookkeeping. The transfer of your personal data to the service providers who support us will take effect from 25.05.2018 either on the legal basis of Article 6 (1) (b) GDPR for the performance of a contract of which the data subject is a party, or for the performance of pre-contractual measures or on a proper contract the processing on behalf, which meets the requirements of Article 28 GDPR.

We reserve the right also to include on our website external third-party content (eg You-Tube videos, external card services, external graphics, etc.).

If you access and use these third-party content on our website, your IP address (also from 25.05.2018 on the legal basis of Article 6 paragraph 1 letter b) GDPR) will be forwarded to third-party providers so that the content you request from the third party can be sent to your browser. The transmission of your IP address to these third-party providers is therefore absolutely necessary in order to send the retrieved contents to the browser of your end device. The processing of your data by third-party content providers is subject to their privacy policy. Without your express consent, we do not use third-party tools that use so-called "tracking mechanisms". "Tracking mechanisms" are technologies that make the behavior of affected persons on the Internet comprehensible and enable the creation of user profiles.

A transfer of your personal data to other third parties is otherwise only if we are required by law (eg to authorities to investigate cyber attacks and any crimes committed or to tax offices to comply with tax obligations or to courts in case of litigation) from 25.05.2018 on the legal basis of Article 6 (1) (c) GDPR and, where appropriate, lawyers and tax advisers on the legal basis of Article 6 (1) (c) GDPR and Article 6 (1) (f) GDPR. Our legitimate interest in disclosing your data to lawyers is to exercise, assert or defend legal claims. Our legitimate interest in disclosing your information to external tax advisers is to be able to properly meet our tax obligations.

In addition, we will not share your personal information with third parties without your express consent.

The mandatory data required by us can be found in the input mask during the registration or ordering process. Other information that is not required for the purposes described above, you can voluntarily; they are marked accordingly by us when collecting the data during the registration or ordering process.

4. Use of cookies

We use so-called "cookies" on our website. Cookies are small text files that are sent by our web server to your browser as part of your visit to our website and are temporarily stored by this on your device (eg PC, smartphone, tablet ) for different purposes. Below we inform you about the use of cookies on our website:

Due to technical reasons, it may be necessary to allow the use of cookies for the full range of functions of our website so that your device can continue to be identified when you visit our website when switching from one of our websites to another (so-called "session cookies"). ,

In addition, we reserve the right to use so-called "permanent cookies", so that you can use our website more effectively. Persistent cookies allow us to recognize your device when visiting our website again and to store information about your last visit (eg your preferred language or other settings). We only use persistent cookies, which are automatically deleted after 12 months at the latest.

The above-mentioned cookies may also be used by third-party providers of tools that we use on our website, in particular for statistical and analytical purposes. We will only use third-party tools with privacy-friendly settings. Accordingly, we will not use any so-called " targeting cookies" on our website without your prior express consent , which will make the behavior of affected persons on the Internet comprehensible and enable the creation of user profiles. If we use third-party tools, we will inform you about the use, operation and further details of the respective tools under point 15. of this Privacy Policy.

The use of the cookies described above will take effect from 25.05.2018 on the legal basis of Article 6 paragraph 1 letter f) GDPR. Our legitimate interest in using these cookies is to enable our customers and our website users to more effectively use our services and to analyze and improve our website.

Whether cookies can be set and retrieved can be determined by the settings in your browser. For example, you can disable cookies in your browser altogether, restrict it to certain websites, or configure your browser to automatically notify you when a cookie is about to be placed and ask for your permission. In addition, you can set your browser so that cookies are automatically deleted when closing the browser. Finally, you may be able to enable a Do-Not-Track ("DNT") feature in your browser so that it will not automatically be tracked by any web analytics tool you use. Information about the configuration of your browser settings can be found in the help function of your respective Internet browser.

5. Storage and deletion periods for personal data

If the processing purpose for your respectively required personal data does not apply, your personal data processed by us will be routinely deleted or blocked, unless you have consented to a permanent storage of your personal data.

If individual data must be stored after elimination of the processing purposes due to legal retention periods (eg tax and commercial storage regulations), the blockage of the data takes the place of a deletion. The data to be retained may then be processed on the legal basis of Article 6 (1) (c) of the GDPR only for the purposes set out above.

6. Your rights as data subject

You have the rights described below at any time:

- Right to confirmation and to information about the personal data processed by us pursuant to Article 15 GDPR

- Right to correct your personal data in accordance with Article 16 GDPR

- Right to cancellation of your personal data ("right to be forgotten ") in accordance with Article 17 GDPR

- Right to restriction of the processing of your personal data pursuant to Article 18 GDPR

- Right to transfer data of your personal data in accordance with Article 20 GDPR

- In accordance with Article 22 of the GDPR, you have the right not to be subject to a decision based solely on automated processing - including profiling - which will have legal effects or similar consequences for you.

Please send us your request to the contact details stated in section 2 of this privacy policy.

7. Right of objection

You have the right, at any time for reasons arising from your particular situation, to object to the processing of personal data concerning you, which will take effect on 25.05.2018 under Article 6 (1) (e) or (f) of the GDPR; this also applies to profiling based on these provisions.

We will no longer process your personal information in this case unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or serve to assert, exercise or defend legal claims.

If personal data is processed in order to operate direct mail, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

You also have the right, for reasons arising out of its particular situation, to object to the processing of personal data relating to you for scientific or historical research purposes or for statistical purposes under Article 89 (1) of the GDPR unless processing is necessary to fulfill a public interest task. If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

8. Withdrawal at consent

You may revoke your expressly granted data protection consent at any time with effect for the future. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.

9. Complaint about data breaches at the supervisory authorities

If you believe that your privacy rights are violated, you can contact the regulatory authority of your state or the state of our headquarters. If a complaint relates to a company established in another federal state, the supervisory authority forwards the complaint to the supervisory authority responsible there.

10. Legal or contractual provisions for the provision of personal data, as well as information on the need for the conclusion of the contract and on the obligation of the data subject to provide the personal data and possible consequences of non-provision

As described above, we collect and process your personal information, in particular for the performance of a contract to which the data subject is a party, or for the performance of pre-contractual actions that are performed at the request of the data subject. The provision of personal data is therefore contractually required for this purpose. In some cases, the provision of personal data for contracts (eg for invoices) is also required by law due to tax and / or commercial law. Unless you provide us with personal information, this will mean that we can not conclude a contract with you and / or can not respond to your requests.

Insofar as your personal data is processed on the basis of a legitimate interest pursuant to Art. 6 (1) letter f) of the GDPR, the provision of your data for these purposes is neither contractually nor legally required. The details of the data processing on the basis of a legitimate interest can be found in the respective sections of the above information. Unless you provide us with personal information for these purposes, you may not be able to use our website in full or in part.

11. Automated decisions on a case-by-case basis, including profiling

We do not use automated decision making - including profiling according to Article 22 (1) and (4) of the GDPR.

12. Notification obligation in connection with the correction or deletion of personal data or the restriction of processing

We advise all recipients who have been disclosed personal data, any correction or deletion of personal data or a restriction of processing under Article 16, Article 17 paragraph 1 and Article 18 GDPR, unless this proves to be impossible or is with a disproportionate effort. We also teach you about these recipients if you request it.

13. Data security

We use technical and organizational security measures to protect the processing of personal data, in particular against accidental or intentional manipulation, loss, destruction or against the attack of unauthorized persons. Our security measures are continuously improved in line with technological developments.

14. Questions / Comments

If you have any questions or comments about this privacy policy or general data protection, you are welcome to contact us at our contact details, which you can find in section 2 of this privacy policy.

15. Use of third-party tools and content

We do not use any tools (programs) and third-party content on our website which use permanent cookies for statistical purposes or analytical purposes and / or process your IP address and / or other personal data.

Status of the Privacy Policy: 06/29/2019