Privacy is of great importance to us. When you visit this website, information of a general nature is automatically collected and stored in our server log files. This includes the type of web browser, operating system, domain name of your internet service provider, and similar information. This data does not allow us to draw conclusions about your identity. It is technically necessary for delivering website content requested by you correctly and is mandatory when using the internet. Anonymous information of this kind is statistically evaluated by us to optimize our online presence and the underlying technology, in order to provide you with a better offering.
The processing of personal data, such as names, addresses, email addresses, or phone numbers of an individual, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to Siegfried Besier. Through this privacy policy, our company seeks to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, this privacy policy explains the rights to which individuals are entitled.
To protect the security of your data during transmission, we use state-of-the-art encryption methods (SSL) via HTTPS.
Siegfried Besier, as the responsible party for data processing, has implemented numerous technical and organizational measures to ensure the most comprehensive protection of personal data processed via this website. However, internet-based data transmissions can generally have security gaps, so absolute protection cannot be guaranteed. For this reason, every affected person is free to transmit personal data to us through alternative means, such as by telephone.
1. Definitions
The privacy policy of Siegfried Besier is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). This privacy policy should be easy to read and understand for the public, as well as for our customers and business partners. To ensure this, we would like to explain the terms used in this privacy policy:
a) Personal data Personal data means any information relating to an identified or identifiable natural person (the "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
b) Data subject Data subject is any identified or identifiable natural person whose personal data is processed by the responsible party.
c) Processing Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
d) Restriction of processing Restriction of processing is the marking of stored personal data with the aim of limiting its processing in the future.
e) Profiling Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.
f) Pseudonymization Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
g) Controller or responsible party Controller or responsible party is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
h) Processor Processor is a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
i) Recipient Recipient is a natural or legal person, public authority, agency, or another body, to which the personal data is disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
j) Third party Third party is a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
k) Consent Consent of the data subject is any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
2. Name and Address of the Controller
Controller as defined in the General Data Protection Regulation, other data protection laws applicable in the European Union member states, and other provisions with data protection character is:
Siegfried Besier
Borngasse 15
D-65326 Aarbergen, Germany
Email: info@jakobsbrunnen.org
3. Collection of General Data and Information
The website of Siegfried Besier collects a range of general data and information with each access by an affected person or an automated system. This general data and information are stored in the server's log files.
The following data may be collected:
Siegfried Besier does not draw conclusions about the affected person when using this general data and information. Instead, this information is needed to:
(a) Use of Cookies
We use cookies on our website, which are small text files transferred from our web server to your hard drive. By doing so, we automatically receive certain data, such as the browser used, operating system, and your internet connection.
Important - Cookies cannot be used to start programs or transfer viruses to a computer. The information contained in cookies helps us facilitate navigation and enable the correct display of our web pages. In certain situations, they are even technically necessary.
Under no circumstances will we share the cookie data we collect with third parties or establish a connection to personal data without your consent.
You can visit our website without using cookies. You can configure your internet browser to accept cookies. You can deactivate the use of cookies at any time through your browser settings. However, please consider the potential impact before applying the cookie blockade. Use the help functions of your internet browser to learn how to change these settings. Please note that certain functions are technically necessary, and our website may not function correctly if you have disabled the use of cookies.
4. Contact Possibility via the Website
We have provided a contact form on our website. When you contact us via email or the contact form, the information you provide will be stored for the purpose of processing the inquiry and for possible follow-up questions, in accordance with legal requirements.
5. Routine Erasure and Blocking of Personal Data
Legal requirements mandate data minimization and data retention. We adhere to these principles of data minimization and data retention. We store your personal data only as long as necessary to achieve the purposes mentioned above or as required by the legislator, who may provide for various retention periods. Once the purpose has been fulfilled or these retention periods have expired, the relevant data will be routinely blocked or deleted in accordance with legal regulations. Further information can be found in the current version of the GDPR.
a) Right to Confirmation
Every data subject has the right, as granted by the European legislator, to obtain confirmation from the data controller whether personal data concerning them is being processed. If a data subject wishes to exercise this right to confirmation, they can contact an employee of the data controller at any time.
b) Right to Information
Every data subject affected by the processing of personal data has the right, as granted by the European legislator, to obtain free information from the data controller at any time about the personal data stored about them and to receive a copy of this information. Furthermore, the European legislator has granted the data subject the right to be informed about the following information:
Furthermore, the data subject has the right to know whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer.
If a data subject wishes to exercise this right to information, they can contact an employee of the data controller at any time.
c) Right to Rectification
Every data subject affected by the processing of personal data has the right, as granted by the European legislator, to demand the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right to request the completion of incomplete personal data, taking into account the purposes of the processing, by means of a supplementary statement.
If a data subject wishes to exercise this right to rectification, they can contact an employee of the data controller at any time.
d) Right to Erasure (Right to be Forgotten)
Every data subject affected by the processing of personal data has the right, as granted by the European legislator, to demand from the data controller the immediate erasure of personal data concerning them, provided one of the following reasons applies and the processing is not necessary:
If one of the above-mentioned reasons applies and a data subject wants to request the erasure of personal data stored by Siegfried Besier, they can contact an employee of the data controller at any time. Siegfried Besier will ensure that the request for erasure is promptly complied with.
If the personal data has been made public by Siegfried Besier, and if our company, as the data controller, is obliged to erase the personal data pursuant to Article 17(1) of the GDPR, Siegfried Besier will take appropriate measures, including technical measures, to inform other data controllers processing the published personal data that the data subject has requested the erasure of any links to such personal data or copies or replications of such personal data, unless the processing is necessary. Siegfried Besier will take the necessary actions in individual cases.
e) Right to Restriction of Processing
Every data subject affected by the processing of personal data has the right, as granted by the European legislator, to demand from the data controller the restriction of processing if one of the following conditions applies:
If one of the above-mentioned conditions applies and a data subject wishes to request the restriction of personal data that is stored by Siegfried Besier, they can contact an employee of the data controller at any time. Siegfried Besier will initiate the restriction of processing.
f) Right to Data Portability
Every data subject affected by the processing of personal data has the right, as granted by the European legislator, to receive the personal data concerning them, which was provided to a data controller, in a structured, commonly used, and machine-readable format. They also have the right to transmit this data to another data controller without hindrance from the data controller to which the personal data has been provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
Furthermore, when exercising the right to data portability under Article 20(1) of the GDPR, the data subject has the right to have the personal data transmitted directly from one data controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.
To exercise the right to data portability, the data subject can contact an employee of Siegfried Besier at any time.
g) Right to Object
Any data subject affected by the processing of personal data has the right, granted by the European legislator, to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them, based on Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.
Siegfried Besier will no longer process the personal data in the event of objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing is for the establishment, exercise, or defense of legal claims.
If Siegfried Besier processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of their personal data for such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to processing for direct marketing purposes, Siegfried Besier will no longer process the personal data for these purposes.
Furthermore, the data subject has the right to object, on grounds relating to their particular situation, to the processing of personal data concerning them, which is carried out for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.
To exercise the right to object, the data subject may directly contact any employee of Siegfried Besier or another employee. The data subject is also free to exercise their right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, using automated means using technical specifications.
h) Automated Decisions, Including Profiling
Any data subject affected by the processing of personal data has the right, granted by the European legislator, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, unless the decision:
If the decision:
If the data subject wishes to exercise rights concerning automated decisions, they may contact an employee of the data controller at any time.
i) Right to Withdraw Consent
Any data subject affected by the processing of personal data has the right, granted by the European legislator, to withdraw consent to the processing of their personal data at any time.
If the data subject wants to exercise the right to withdraw consent, they may contact an employee of the data controller at any time.
7. Legal Basis for Processing
Article 6(1)(a) of the GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Article 6(1)(b) of the GDPR. The same applies to such processing operations that are necessary for carrying out pre-contractual measures, for example in cases of inquiries regarding our products or services. If our company is subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Article 6(1)(c) of the GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and their name, age, health insurance data, or other vital information would have to be passed on to a doctor, hospital, or other third party. Then the processing would be based on Article 6(1)(d) of the GDPR. Finally, processing operations could be based on Article 6(1)(f) of the GDPR. This legal basis is used for processing operations which are not covered by any of the aforementioned legal grounds if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a customer of the data controller (Recital 47 Sentence 2 GDPR).
8. Legitimate Interests Pursued by the Controller or a Third Party
If the processing of personal data is based on Article 6(1)(f) of the GDPR, our legitimate interest is the conduct of our business activities for the benefit of the well-being of all our employees and shareholders.
9. Duration for which Personal Data will be Stored
The criterion for the duration of the storage of personal data is the respective statutory retention period. After the expiration of the period, the relevant data will be routinely deleted, provided they are no longer necessary for the fulfillment or initiation of a contract.
10. Legal or Contractual Provisions for the Provision of Personal Data; Necessity for Contractual Conclusion; Obligation of the Data Subject to Provide Personal Data; Possible Consequences of Non-Provision
We inform you that the provision of personal data is partly required by law (e.g., tax regulations) or may result from contractual provisions (e.g., information about the contractual partner). In some cases, it may be necessary for the data subject to provide us with personal data, which must subsequently be processed by us for the conclusion of a contract. The data subject is, for example, obliged to provide us with personal data when our company enters into a contract with them. Non-provision of personal data would have the consequence that the contract with the data subject could not be concluded. Before providing personal data, the data subject must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of personal data is required by law or contract or is necessary for the conclusion of a contract, whether there is an obligation to provide the personal data, and what the consequences of non-provision of the personal data would be.
11. Existence of Automated Decision-Making
As a responsible company, we do not use automated decision-making or profiling.
12. Changes to Our Privacy Policy
We reserve the right to amend this privacy policy if necessary to ensure compliance with current legal requirements or to implement changes in our services in the privacy policy, for example, with the introduction of new services. The new privacy policy will apply for your next visit.