Privacy Policy
Effective from 02.07.2018
We take your privacy very seriously and process your personal data in accordance with the applicable legal data protection requirements. Personal data within the meaning of this information is all information that can relate to you as a person, such as name, address, email and IP address, user behavior.
With the following privacy policy, we inform you about the processing of your personal data by us. Furthermore, we provide you with an overview of your data protection rights. Which data is processed in detail and how it is used depends primarily on the services used, requested or agreed upon.
1. Responsible Party and Data Protection Officer
1.1 Controller
The controller pursuant to Article 4 No. 7 General Data Protection Regulation (GDPR) and service provider pursuant to Section 13 German Telemedia Act (TMG) is:
Sylvia Pirnay
Practice in Cologne-Esch
Martinusstraße 53
50765 Cologne
Practice in Cologne-Worringen
Hackhauser Weg 61
50769 Cologne
1.2 Data Protection Officer
Practice in Cologne-Esch
The Data Protection Officer
Martinusstraße 53
50765 Cologne
E-Mail: praxis@pirnay.de
2. Source of Personal Data
We process personal data that we receive from you during your visit to our website, as part of your contact with us by email or via a contact form.
3. Categories of Personal Data Processed
3.1 Website Visit
If you visit or use our website purely for information purposes, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:
- Your IP address
- Date, time and duration of your visit
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request originates
- Your browser
- Your operating system
This data is used exclusively for internal statistical purposes.
3.2 Cookies
In addition to the aforementioned data, transient and persistent cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using and through which certain information flows to the entity that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the website more user-friendly and effective overall.
3.3 Cookie Settings
Most browsers are set to accept cookies. However, you can deactivate the storage of cookies in your browser at any time or set your browser so that you receive a message as soon as cookies are sent. However, we would like to point out that you may not be able to use all the functions of this website in this case.
3.4 Data Separation
This stored information is kept separate from any other data you may provide to us. In particular, the cookie data is not linked to your other data.
4. Additional Functions and Services of Our Website
4.1 In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you usually have to provide additional personal data that we use to provide the respective service.
4.2 When you contact us by email or via a contact form, the data you provide (your email address, salutation, first and last name and, if applicable, your telephone number) will be stored by us in order to answer your inquiry. We delete the resulting data after storage is no longer necessary or restrict processing if there are statutory retention obligations.
5. Integration of Google Maps
5.1 On this website we use the Google Maps service. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.
5.2 By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under Section 3 of this privacy policy is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses it for advertising, market research and/or the needs-based design of its website. Such evaluation takes place in particular (even for users who are not logged in) for the provision of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
5.3 Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy statements. There you will also find further information on your rights in this regard and setting options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield.
6. Categories of Recipients of Personal Data
6.1 We have some of the aforementioned processes and services carried out by carefully selected service providers commissioned in accordance with data protection regulations. These external service providers are bound by our instructions and are regularly monitored. They will not pass on your data to third parties.
6.2 With regard to the disclosure of data to other recipients, we only pass on information about you if statutory provisions require this, you have consented or we are authorized to pass on the information. If these conditions are met, recipients of personal data may include:
- Public authorities and institutions (e.g. tax authorities, law enforcement agencies) if there is a legal or official obligation.
- Other companies or comparable institutions to which we transmit personal data in order to carry out the business relationship with you.
7. Purposes for Which Personal Data is to be Processed and Legal Basis of Processing
We process your personal data in compliance with the applicable legal data protection regulations. Processing is lawful if the following condition is met:
Consent (Article 6 paragraph 1 a) GDPR):
The processing of personal data is lawful with consent to processing for specified purposes (e.g. processing your inquiry, use of data for marketing purposes). Consent given can be withdrawn at any time with effect for the future. This also applies to the withdrawal of declarations of consent that were given to us before the GDPR came into force, i.e. before July 1, 2018.
8. Intention to Transfer Personal Data to a Third Country or an International Organization
Active transfer of personal data to a third country only takes place if this has been expressly indicated within the framework of the aforementioned services.
9. Criteria for Determining the Duration for Which Personal Data is Stored
9.1 The data is stored in accordance with statutory provisions on data processing and in observance of statutory retention periods. We only process and use your data for the purposes for which we are authorized and as long as the data is required for these purposes.
9.2 If the data is no longer required for the purpose or to fulfill legal obligations, it will generally be deleted unless its - temporary and possibly restricted - further processing is necessary for the following purposes:
- The fulfillment of commercial and tax retention obligations: The German Commercial Code (HGB) and the German Fiscal Code (AO) should be mentioned. According to this, the retention or documentation periods are set at up to 10 years.
- The preservation of evidence within the framework of statutory limitation periods: According to Sections 195 et seq. of the German Civil Code (BGB), the regular limitation period is three years, but in special circumstances up to 30 years.
10. Your Data Protection Rights
10.1 Basic Rights
Every data subject has the right to information pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to erasure pursuant to Article 17 GDPR, the right to restriction of processing pursuant to Article 18 GDPR, the right to object pursuant to Article 21 GDPR and the right to data portability pursuant to Article 20 GDPR. The restrictions according to Sections 34 and 35 BDSG apply to the right to information and the right to erasure. In addition, there is a right to lodge a complaint with a competent data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).
10.2 Right of Revocation
You can withdraw your consent to the processing of personal data at any time with effect for the future. This also applies to the withdrawal of declarations of consent that were given to us before the General Data Protection Regulation came into force, i.e. before July 2, 2018.
10.3 Right of Objection
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing on the basis of a balancing of interests). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
The objection can be made informally and should preferably be addressed to:
Practice in Cologne-Esch
The Data Protection Officer
Martinusstraße 53
50765 Cologne
E-Mail: praxis@pirnay.de
11. Obligation to Provide and Possible Consequences of Non-Provision of Personal Data
When using our services, you must provide the personal data that is necessary to fulfill the purpose or that we are legally obliged to collect. Without this data, we will generally not be able to provide the desired service.
12. Existence of Automated Decision-Making Including Profiling
To establish and execute the business relationship, we generally do not use fully automated decision-making in accordance with Article 22 GDPR. Should we use this procedure in individual cases, we will inform you separately about this, provided this is legally required.
13. Changes to the Privacy Policy
We continuously develop and optimize our services. It may therefore be that we add new functionalities. Should this have an impact on how your personal data is processed, we will inform you in good time in our privacy policy.