Privacy Policy

The following Privacy Policy applies to the use of the Website www.aleksandra-civric-heim.com (hereinafter referred to as the "Website").

Data protection is very important to us. The collection and processing of your personal data is carried out in compliance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR). We collect and process your personal data in order to be able to make the above-mentioned Website available to you. This statement describes how and for what purpose your data is collected and used and what options you have in connection with your personal data.

By using this Website, you consent to the collection, use and transfer of your data in accordance with this Privacy Policy.

1 Data controller

The data controller responsible for the collection, processing and use of your personal data within the meaning of the GDPR is

Dipl.-Ing. Aleksandra Civric-Heim
Kastanienhain 24
65812 Bad Soden a.T.

If you wish to object to the collection, processing or use of your data by us in accordance with these data protection provisions as a whole or individually, you can address your objection to the data controller named above.

You may save and print out this Privacy Policy at any time.

2 General use of the Website

Access data

We collect information about you when you use this Website. We automatically collect information about your usage behavior and your interaction with us and log data about your computer or mobile device. We collect, store and use data about each time you access our Website (server log files). Access data includes the name and URL of the retrieved file, date and time of retrieval, amount of data transferred, notification of successful retrieval (HTTP response code), browser type and version, operating system, referrer URL (i.e. the previously visited page), IP address and the requesting provider.

We use this log data, without assigning it to you personally or otherwise creating a profile, for statistical evaluations for the purpose of the operation, security and optimization of our online offer, but also to anonymously record the number of visitors to our Website (traffic) and the extent and type of use of our Website and services, as well as for billing purposes in order to measure the number of clicks received from cooperation partners. This information allows us to provide personalized and location-based content and analyze traffic, troubleshoot and fix errors, and improve our services. We reserve the right to examine the log data retrospectively if there is a justified suspicion of unlawful use based on concrete evidence.

We store IP addresses in the log files for a limited period of time if this is necessary for security purposes or for the provision or billing of a service, for example if you use one of our offers. After the cancellation of an order or after receipt of payment, we delete the IP address if it is no longer required for security purposes. We also store IP addresses if we have a concrete suspicion of a criminal offense in connection with the use of our Website. We also store the date of your last visit as part of your account (e.g. when registering, logging in, clicking on links, etc.).

Email contact

If you contact us (e.g. via the contact form or email), we will save your details for processing the request and in the event that follow-up questions arise. We only store and use other personal data if you consent to this or if this is permitted by law without special consent.

Legal basis and storage period

The legal basis for data processing in accordance with the above paragraphs is point (f) of Article 6(1) GDPR. Our interests in data processing are, in particular, to ensure the operation and security of the Website, to investigate how visitors use the Website, and to simplify the use of the Website.

Unless specifically stated, we only store personal data for as long as is necessary to fulfill the intended purposes.

Integration of third-party services and content

Our services sometimes include content, services and features from other providers. These include, for example, maps provided by Google Maps, videos from YouTube and graphics and images from other websites. Transmission of the IP address is mandatory in order for this data to be retrieved and displayed in the user's browser. This means that the providers (hereinafter referred to as "Third-Party Providers") are aware of the IP address of the respective user.

Even if we endeavor to only use Third-Party Providers who only need the IP address in order to be able to deliver content, we have no influence on whether the IP addresses are stored. In this case, this process is used for statistical purposes, among other things. Insofar as we are aware that IP addresses are being stored, we inform our users accordingly.

Your data processing rights as a data subject

You have various rights under applicable law in relation to your personal data. If you would like to assert these rights, please send your request by email or mail, clearly identifying yourself, to the address stated in section 1.

You will find an overview of your rights below.

3 Right to confirmation and information

You have the right to obtain confirmation from us at any time regarding whether personal data concerning you is being processed. If this is the case, you have the right to obtain information from us free of charge about the personal data stored about you, together with a copy of this data. Moreover, you have the right to the following information:

  1. Purpose of processing;
  2. Categories of personal data processed;
  3. Recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in non-EU countries or international organizations;
  4. Where possible, the scheduled duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
  5. The right to obtain the rectification or erasure of personal data concerning you, or to obtain the restriction of processing by the data controller or the right to object to such processing;
  6. The right to lodge an appeal with a data protection authority;
  7. If the personal data was not collected from you, all available information about the origin of the data;
  8. The use of automated decision-making, including profiling, pursuant to Article 22(1) and (4) GDPR and – in such cases at least – meaningful information about the logic involved and the scope and intended effects of such processing for you.
  9. If personal data is transferred to a non-EU country or to an international organization, you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.

Right to rectification

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account these purposes, you have the right to request the completion of incomplete personal data – including via a supplementary declaration.

Right to erasure ("right to be forgotten")

You have the right to obtain from us the erasure of personal data concerning you without undue delay and we are obliged to erase personal data without undue delay if any of the following grounds apply:

  1. The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  2. You withdraw your consent on which the processing was based according to point (a) of Article 6(1) GDPR, or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing.
  3. You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
  4. The personal data has been processed unlawfully.
  5. The deletion of the personal data is required to fulfill a legal obligation under Union law or the law of the Member States we are subject to.
  6. The personal data was collected in relation to services offered by the information society pursuant to Article 8(1) GDPR.
  7. If we have made the personal data public and we are obliged to erase it, we will take appropriate measures, including technical measures, taking into account the available technology and the cost of implementation, to inform data controllers who process the personal data that you have requested them to erase all links to this personal data or copies or replications of this personal data.

Right to restriction of processing

You have the right to demand that we restrict processing if one of the following conditions is met:

  1. the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data,
  2. the processing is unlawful and you refused the erasure of the personal
  3. data and instead requested the restriction of the use of the personal data;
  4. We no longer need the personal data for the purposes of processing, but you need it for the assertion, exercise or defence of legal claims, or
  5. you have objected to processing pursuant to Article 21(1) GDPR pending the verification of whether the legitimate grounds of our company override yours.

Right to data portability

You have the right to receive the personal data concerning you, that you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit this data to another controller without hindrance from us, insofar as

  1. the processing is based on consent pursuant to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR, and
  2. the processing is carried out with the aid of automated procedures.
  3. In exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly from us to another controller, insofar as this is technically feasible.

Right of objection

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.

Right to revoke consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time.

Right to appeal to a data protection authority

You have the right to lodge a complaint with a data protection authority, in particular in the Member State of your residence, place of work or place of the alleged violation, if you consider that the processing of personal data concerning you is unlawful.

4 Data security

We make every effort to ensure the security of your data within the framework of the applicable data protection laws and technical capabilities.

Your personal data is transmitted in encrypted form. We use the SSL (Secure Socket Layer) coding system, but would like to point out that data transmission on the internet (e.g. when communicating by email) may have security gaps. A complete protection of the data against access by third parties is not possible. A complete protection of the data against access by third parties is not possible.

To secure your data, we maintain technical and organizational security measures that we continually adapt to the best available technology.

We also do not guarantee that our service will be available at certain times; disruptions, interruptions or failures cannot be ruled out. The servers we use are carefully backed up on a regular basis.

5 Automated decision-making

We do not carry out automated decision-making on the basis of the personal data collected.

6 Disclosure of data to third parties, no data transfer to non-EU countries

We only use your personal data within our company.

If and insofar as we involve third parties in the fulfillment of contracts (such as logistics service providers), they will only receive personal data to such an extent as is necessary for the corresponding service.

In the event that we outsource certain parts of data processing ("order processing"), we contractually oblige data processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject.

Data transfer to bodies or persons outside the EU beyond the cases mentioned in this declaration in point 2.3 does not take place and is not planned.

7 Do not issue warning notices without prior contact!

If any content or the design of this Website or the content of the email traffic (newsletters, offers, etc.), which is processed via one of our above-mentioned domains, infringes third-party rights or statutory provisions or otherwise gives rise to competition law problems in any form, we request, with reference to § 8 para. 4 UWG, an appropriate, sufficiently explanatory and prompt message at no charge.

We guarantee that any passages or parts of this Website and emails that are rightly objected to will be removed within a reasonable period of time or comprehensively adapted to the legal requirements without the need for you to seek legal assistance.

The involvement of a lawyer to issue a warning notice at the service provider's expense does not correspond to the service provider's actual or presumed intention and would therefore constitute a breach of § 13 (5) UWG due to the pursuit of irrelevant objectives as the dominant motive for initiating proceedings, in particular an intention to generate costs as the actual driving force, as well as a breach of the duty to minimize damages.

8 Cookies

We use cookies. Cookies are small text files that are stored on your end device when you access the Website. These cannot transmit viruses or malware to your computer, but they can contain information that enables the user to be identified.

This Website uses third-party website tracking technologies to provide services, continuously improve them and display advertising based on user interests. Click on "Accept" if you agree to this: . You can change or withdraw your consent at any time.

9 Access data / server log files

The provider (or its web space provider) collects data about every access to the Website (server log files). The access data includes:

The name of the Website accessed, the file, the date and time of access, the amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (previously visited page), IP address and the requesting provider.

The provider uses the log data only for statistical evaluations for the purpose of operation, security and optimization of the service. However, the provider reserves the right to check the log data retrospectively if there is legitimate suspicion of unlawful use based on concrete evidence.