Privacy Policy

I take the protection of your personal data seriously and would like to inform you here about the way in which your personal data is processed by me when you visit my website nils-stelte.de.

1. Person Responsible

Responsible in the sense of Art. 4 No. 7 of the EU General Data Protection Regulation (DSGVO) for the processing of your personal data in connection with the use of my website is:

Projekt Allerstraße 1&2 GmbH

Allerstraße 1
12049 Berlin

2. Processing of your personal data

When you visit my website, personal data is processed.

2.1 Data Processing When Contacting Us

If you contact me by e-mail, the data you provide me with, such as your e-mail address, your name and your phone number, if applicable, as well as information about your request will be stored by me in order to answer your questions.

The data processing serves the purpose of processing your request.

The legal basis for the processing of the personal data concerning you is Art. 6 para. 1 p. 1 lit. f DSGVO. The legitimate interest results from the necessity of processing your data in order to be able to answer your inquiry.

I store your data only as long as it is necessary for the purpose, that is, until the complete answer to your request, or, if the request is assigned to a contract, according to the time limits for the duration of the contract.

There is no legal obligation to provide your personal data. However, if you do not want to provide me with your data, it is not possible to contact you.

2.2 Technical data

2.2.1 Logfiles

When you visit my website, a so-called log data record (so-called server log files) is stored temporarily and anonymously on my web server. This consists of:

• IP address and host name
• Time of access
• Browser used by the visitor
• Operating system used by the visitor
• link or URL of origin
• search engine used including keywords used
• length of stay
• number of pages viewed
• last page opened before leaving the website

This data is processed for the purpose of the technical provision of my website and for statistical evaluations as well as for the purpose of identifying and tracing unauthorized access to the web server and other criminal offenses.

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. My legitimate interest for the temporary storage of technical access data is to be able to provide you with a technically functional and user-friendly website and to ensure the security of my system.

The recipient of the data is my hosting service provider Hetzner (see section 3.1 below).

Log file information is stored from the end of your website visit for a maximum of 30 days and then deleted.

The data processing is necessary for the operation of my website. If you wish to object to the data processing, you can do so by not visiting my website.

The provision of personal data is neither legally nor contractually required, but it is necessary for the functionality of my website.

2.2.2 General information about cookies

I do not use cookies on my website.

3. Transfer of personal data to external service providers

For some functions on my website, I integrate external service providers to whom I transfer personal data. All third-party service providers engaged by me act as contract workers for me according to my instructions and are integrated in accordance with Art. 28 DSGVO data protection. The contractual agreement provides, among other things, that order processors undertake to comply with data protection, which includes securing your personal data through appropriate technical and organizational measures - in particular by means of encryption technologies.

3.1 Hetzner

I use Hetzner to host my website. The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. When you visit my website, Hetzner collects various log files including your IP addresses (see section 2.2.1). The legal basis for the collection of this data is Art. 6 para. 1 lit. f DSGVO. I have a legitimate interest in the most reliable presentation of my website.

For more information, please refer to Hetzner's privacy policy:

https://www.hetzner.com/de/legal/privacy-policy/

4. Data deletion and storage period

For the processing operations carried out by me, I indicate in each case how long the data will be stored by me and when they will be deleted or blocked. Unless an explicit storage period is specified, your personal data will be deleted or blocked as soon as the purpose or legal basis for the storage ceases to apply. In principle, your data will only be stored on my servers in Germany, subject to any transfer that may take place, which will be specified elsewhere.

However, storage may take place beyond the specified time in the event of a (threatened) legal dispute with you or other legal proceedings, or if storage is required by legal regulations to which I am subject as the responsible party (e.g. § 257 HGB, § 147 AO). If the storage period prescribed by the legal regulations expires, the personal data will be blocked or deleted, unless further storage by me is necessary and there is a legal basis for this.

5. Data security

I use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties (e.g. SSL encryption for my website), taking into account the state of the art, implementation costs and the nature, scope, context and purpose of the processing, as well as the existing risks of a data breach (including its likelihood and impact) for the data subject. My security measures are continuously improved in line with technological developments.

6. No data transfer to a so-called third country

Your personal data will not be transferred to companies located outside the European EU or the European Economic Area (so-called third countries).

7. No obligation to provide personal data

I do not make the provision of the offers of my website dependent on you providing me with personal data beforehand. For you as a user of my website, there is no legal or contractual obligation to provide me with your personal data; however, it may be that I can provide certain services only limited or not at all, if you do not provide the necessary data. If this should be the case, you will be informed separately in this privacy policy.

8. Your rights

Ihre Rechte als betroffene Person bezüglich der Verarbeitung der Sie betreffenden personenbezogenen Daten können Sie mir gegenüber unter den eingangs angegebenen Kontaktdaten jederzeit geltend machen. Sie haben als betroffene Person das Recht:

• In accordance with Art. 15 DSGVO to request information about your data processed by me. In particular, you can request information about the processing purposes, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or opposition, the existence of a right of complaint, the origin of your data, if not collected by me, as well as the existence of automated decision-making including profiling and, if applicable. In accordance with Art. 16 DSGVO, to request the correction of inaccurate or the completion of your data stored by me without delay;In accordance with Art. 17 DSGVO, to request the deletion of your data stored by me, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
• pursuant to Art. 18 DSGVO, to request the restriction of the processing of your data, insofar as the accuracy of the data is disputed by you or the processing is unlawful;
• pursuant to Art. 20 DSGVO, to receive your data that you have provided to me in a structured, common and machine-readable format or to request the transfer to another controller ("data portability");
• object to the processing pursuant to Art. 21 DSGVO, provided that the processing is based on Art. 6 (1) p. 1 lit. e or lit. f DSGVO. This is particularly the case if the processing is not necessary for the performance of a contract with you. Unless it is an objection to direct marketing, when exercising such an objection, please explain the reasons why I should not process your data as I have done. In the event of your justified objection, I will review the merits of the case and either discontinue or adjust the data processing or show you my compelling legitimate grounds on the basis of which I will continue the processing;
• In accordance with Art. 7(3) DSGVO, to revoke your consent once given - i.e. your voluntary will, made understandable in an informed manner and unambiguously by a statement or other unambiguous confirming act, that you agree to the processing of the personal data in question for one or more specific purposes - at any time vis-à-vis me, if you have given such consent. This has the consequence that I may no longer continue the data processing, which was based on this consent, in the future and
• in accordance with Art. 77 DSGVO to complain to a data protection supervisory authority about the processing of your personal data by me.

9. Update of the privacy policy

Due to changes in legal or regulatory requirements as well as the further development of technical standards and my offer, adjustments to this privacy policy may be necessary, which is why it is insofar regularly reviewed for the need for changes or additions. The privacy policy can therefore be changed at any time with effect for the future.

This data protection declaration has the status August 2024.