Data Security

General Information

This privacy policy provides detailed information about what happens to your personal data when you visit our website www.sachsentrance.com. Personal data includes all data with which you can personally identify yourself. We strictly adhere to the legal regulations, especially the General Data Protection Regulation ("GDPR"), when processing your data and place great importance on ensuring that your visit to our website is absolutely secure.

Controller

Responsible for data collection and processing of personal data on this website:
Name: Sachsentrance GbR
Street, House Number: Libauer Straße, 3
Postal Code, City: 10245, Berlin
Country: Germany
Email: sachsentrance[at]mail.de
Tel.: +491636854530

Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your device. Cookies cannot execute programs or transmit viruses to your computer system. Cookies that are necessary for the electronic communication process or for providing certain functions requested by you are stored based on Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in storing cookies for the technically error-free and optimized provision of our services. If other cookies (e.g., cookies for analyzing your browsing behavior) are stored, they are treated separately in this privacy policy. Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit ends. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit. You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

Contact

If you contact us, including by email, the transmitted data, including your contact details, will be stored to process your inquiry or to be available for follow-up questions. This data will not be passed on to third parties without your consent. The processing of your data is based exclusively on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent already given at any time. An informal notification by email is sufficient for the revocation. The legality of the data processing operations carried out before the revocation remains unaffected by the revocation. The data you transmit to us will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory legal provisions - especially retention periods - remain unaffected.

Use and Disclosure of Data

The personal data you provide to us, for example, by email (e.g., your name and address or your email address), will neither be sold to third parties nor otherwise marketed. Your personal data will only be processed for correspondence with you and only for the purpose for which you provided us with the data. For the processing of payments, we will forward your payment data to the bank commissioned with the payment.

The use of data automatically collected during your visit to our website is only for the purposes mentioned above. Otherwise, the data will not be used.

We assure you that we will not disclose your personal data to third parties unless we are legally obligated to do so or you have given us your consent beforehand.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Storage Duration

Personal data provided to us through our website will only be stored for as long as the purpose for which it was entrusted to us is fulfilled. If commercial and tax retention periods must be observed, the storage period for certain data may be up to 10 years. Rights of Data Subjects

Regarding the personal data concerning you, as the data subject of the processing, according to the legal regulations, you have the following rights vis-à-vis the controller:

Data Subject Rights

With regard to personal data concerning you, as a data subject of data processing, you have the following rights vis-à-vis the controller in accordance with legal provisions:

1. Right of Withdrawal

Many data processing operations are only possible with your express consent. If the processing of your data is based on your consent, you have the right to withdraw your consent to the processing of data at any time with effect for the future, pursuant to Art. 7 Para. 3 GDPR. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Storage of data for billing and accounting purposes is not affected by withdrawal.

2. Right to Information

Under Art. 15 GDPR, you have the right to request confirmation from us as to whether personal data concerning you is being processed by us. If such processing exists, you have the right to request information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage duration or the criteria for determining the storage duration, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the source of your data if it was not collected by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing, as well as your right to be informed about which guarantees pursuant to Art. 46 GDPR exist when your data is transferred to third countries.

3. Right to Rectification

Under Art. 16 GDPR, you have the right to demand the immediate correction of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data concerning you.

4. Right to Erasure

Under Art. 17 GDPR, you have the right to request the erasure of your personal data if one of the following grounds applies:
1. Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
2. You withdraw your consent on which the processing pursuant to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR was based, and there is no other legal basis for the processing.
3. You object to the processing pursuant to Art. 21 Para. 1 GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 Para. 2 GDPR.
4. The personal data have been unlawfully processed.
5. The erasure of personal data is necessary to comply with a legal obligation under Union or Member State law to which the controller is subject.
6. The personal data have been collected in relation to the offer of information society services referred to in Art. 8 Para. 1 GDPR.

However, this right does not exist to the extent that processing is necessary:
1. to exercise the right to freedom of expression and information;
2. to fulfill a legal obligation that requires processing under the law of the Union or of the Member State to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in us;
3. for reasons of public interest in the area of public health pursuant to Art. 9 Para. 2 lit. h and i as well as Art. 9 Para. 3 GDPR;
4. for archival purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89 Para. 1 GDPR, insofar as the right of the data subject is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
5. for the establishment, exercise, or defense of legal claims.

If we have made your personal data public and are obliged to delete it in accordance with the above, we will take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform data controllers processing the personal data that you, as the data subject, have requested the deletion of all links to, or copies or replications of, your personal data.

5. Right to Restriction of Processing

You have the right to request the restriction of processing (blocking) of your personal data in accordance with Art. 18 GDPR. To do so, you can contact us at any time using the address provided in the imprint. The right to restrict processing exists in the following cases:

1. If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. During the verification period, you have the right to request the restriction of processing of your personal data.
2. If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
3. If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of processing of your personal data instead of deletion.
4. If you have objected pursuant to Art. 21 Para. 1 GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of processing of your personal data.

If you have restricted the processing of your personal data, except for storage, this data may only be processed with your consent or for the assertion, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

6. Right to be Informed

If you have exercised your right to rectification, erasure, or restriction of processing with us, we are obliged to inform all recipients to whom your personal data has been disclosed about this rectification or erasure of data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right, pursuant to Art. 19 GDPR, to be informed about these recipients upon request.

7. Right not to be Subject to Automated Decision-making, including Profiling

You have the right, according to Art. 22 GDPR, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

This does not apply if the decision:
1. is necessary for entering into or performance of a contract between you and us,
2. is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
3. is based on your explicit consent.

However, such decisions shall not be based on special categories of personal data referred to in Article 9(1) GDPR, unless Article 9(2)(a) or (g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

In cases referred to in (a) and (c) above, we shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view, and to contest the decision.

8. Right to Data Portability

Under Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance from us, where:

the processing is based on consent pursuant to Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b GDPR; and the processing is carried out by automated means.

9. Right to Object

If we process your personal data based on our legitimate interests pursuant to Art. 6 Para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, including profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (objection pursuant to Art. 21 Para. 1 GDPR).

If your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes (objection pursuant to Art. 21 Para. 2 GDPR).

You have the option to exercise your right to object in connection with the use of services of the information society – notwithstanding Directive 2002/58/EC - by means of automated procedures using technical specifications.

10. Right to Lodge a Complaint with a Supervisory Authority Pursuant to Art. 77 GDPR

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit Friedrichstr. 219 10969 Berlin Visitor entrance: Puttkamer Str. 16 - 18 (5th floor) Phone: 030/138 89-0 Email: mailbox@datenschutz-berlin.de Internet: https://www.datenschutz-berlin.de

Validity and Amendment of this Privacy Policy

This privacy policy is effective as of February 22, 2024. We reserve the right to amend this privacy policy at any time in compliance with applicable data protection regulations. This may be necessary, for example, to comply with new legal requirements or to reflect changes to our website or new services offered on our website. The version available at the time of your visit shall apply. If this privacy policy is amended, we intend to announce changes to our privacy policy on this page so that you are fully informed about what personal data we collect, how we process it, and under what circumstances it may be disclosed.