General notice and mandatory information
Data controller
The data controller for this website is:
IT Spezialist Grashorn
Philipp Grashorn
Breite Str. 139
26919 Brake
The data controller determines, alone or jointly with others, the purposes and means of processing personal data such as names and contact details.
Withdrawing your consent to data processing
Some data processing activities require your explicit consent. You may withdraw consent at any time. For analytics consent, use the privacy settings on this page; alternatively, an informal email is sufficient. Withdrawal does not affect the lawfulness of processing carried out before it.
Right to complain to the competent supervisory authority
As a data subject, you have the right to complain to the competent supervisory authority in the case of a data protection violation. The competent supervisory authority for data protection-related questions is the data protection officer of the federal state in which our company's headquarters is located. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to request that data we process automatically on the basis of your consent or in the performance of a contract be transferred to you or to a third party. The provision is made in a machine-readable format. If you request the direct transfer of the data to another controller, this is only possible if technically feasible.
Right to information, correction, blocking, deletion
You have the right at any time, in accordance with the applicable legal provisions, to obtain free information about your stored personal data, the origin of the data, its recipients, and the purpose of data processing. Where applicable, you also have the right to rectification, restriction, or deletion of this data. For this and any other questions about personal data, you may contact us at any time using the contact details in the Legal Notice.
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the website operator, our website uses SSL/TLS encryption. This ensures that data you transmit via this website is not readable by third parties. You can recognize an encrypted connection by the "https://" address line in your browser and the lock symbol in the browser bar.
Meta Pixel
Type and scope of processing
We use the Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The Meta Pixel is only loaded after your explicit consent. Subsequently, it can transmit information about page visits and selected interactions to Meta. This may include the accessed URL, referrer, time, browser and device information, IP address, as well as cookie and browser identifiers. Form content and data for an extended automatic match are not transmitted to Meta by us.
The script is loaded asynchronously from connect.facebook.net after consent. Meta may use the cookie _fbp for advertising and audience measurement. According to Meta's information, this cookie has a maximum lifespan of up to 90 days.
Purpose and legal basis
The processing serves the measurement and optimization of our advertising campaigns as well as the assignment of conversions. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Without your consent, the Meta Pixel will not be loaded. You can revoke your consent in the "Privacy Settings" section at any time with effect from the future.
Recipients and cross-border data transfers
The recipient of the data is Meta Platforms Ireland Limited. Processing by Meta companies in the USA and other third countries cannot be ruled out. Meta refers to the EU-US Data Privacy Framework and standard contractual clauses as data transfer mechanisms. Further information can be found in the Meta Privacy Policy and the Meta Cookie Policy.
Revocation and storage duration
Upon revocation, no further events are sent to Meta. The Meta cookies accessible on this domain are deleted. Data already transmitted to Meta and their storage duration are governed by Meta's guidelines; we have no full control over this processing.
Server log files
The provider of the website automatically collects and stores information that your browser automatically transmits to us. This includes:
Visited page on our domain
Date and time of the server request
Browser type and browser version
Operating system used
Referrer URL
Hostname of the accessing computer
IP address
These data are technically necessary for us to display our website and to ensure its stability and security. (The legal basis for data processing is Art. 6(1)(f) GDPR) These data are not combined with other data sources.
Contact form
Data submitted via the contact form are stored including your contact details to process your request or to be available for follow-up questions. These data will not be passed on without your consent.
Depending on the request, processing is based on Art. 6(1)(b) GDPR for pre-contractual enquiries or Art. 6(1)(f) GDPR for other enquiries. If you provide personal data that is not required for a contract or our legitimate interests, processing is based on your consent under Art. 6(1)(a) GDPR. You may withdraw that consent at any time.
Data submitted via the contact form remain with us until you request their deletion, revoke your consent to storage, or no longer need the data to be stored. Mandatory legal provisions - especially retention periods - remain unaffected.
Cookies
Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us to make our offer more user-friendly, effective, and secure.
Some cookies are 'session cookies.' These cookies are deleted automatically at the end of your browser session. In contrast, other cookies remain on your device until you delete them yourself. These cookies help us to recognize you when you return to our website.
With a modern web browser, you can monitor, restrict, or block the setting of cookies. Many web browsers can be configured so that cookies are automatically deleted when the program is closed. Deactivating cookies may result in limited functionality of our website.
The setting of cookies that are necessary for the execution of electronic communication processes or the provision of certain, desired functions (e.g., shopping cart) is based on Art. 6(1)(f) GDPR. As the operator of this website, we have a legitimate interest in storing cookies to technically ensure the error-free and smooth provision of our services. If other cookies (e.g., for analysis functions) are set, these are treated separately in this privacy policy.
Matomo
Type and scope of processing
We use the self-hosted open-source software tool Matomo (formerly PIWIK) on our website. Matomo becomes active only after you explicitly consent to analysis via the consent dialog. When subsequent pages of our website are accessed or selected interactions are performed, the following data may be processed:
Two bytes of the IP address of the user's calling system (anonymized IP address)
The accessed webpage
The website from which the user arrived at the visited webpage (Referrer)
Subpages that are accessed from the visited webpage
Time spent on the webpage
Frequency of webpage visits
Device type, operating system, browser, and screen resolution
Campaign parameters such as source, medium, campaign, content, and search term, if present in the visited URL
Selected interactions such as CTA, package, and contact clicks, plus the start and successful submission of the contact form; form contents are not sent to Matomo
The software runs exclusively on our web servers. Personal data is stored only there and is not shared with third parties.
Purpose and legal basis
We process this data to measure reach, analyse page navigation and selected interactions, and attribute campaigns and form conversions. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may withdraw consent at any time in the "Privacy Settings" section on this page with future effect. Withdrawal does not affect the lawfulness of prior processing. You are under no legal or contractual obligation to provide this data. Without consent, the website remains fully functional and sends no analytics data to Matomo.
Storage duration
Your selection in the consent dialog is stored as a technically necessary setting on your device for six months. After consent, Matomo primarily uses the visitor cookie _pk_id for up to 13 months, the attribution cookie _pk_ref for up to six months, and short-lived visit cookies such as _pk_ses for typically 30 minutes. Upon revocation, the Matomo cookies and the locally stored campaign context are deleted. The refusal itself is stored for six months to prevent the consent dialog from appearing on every page visit.
PayPal
Our website allows payment via PayPal. The provider of the payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
When you pay with PayPal, the payment data you enter is transmitted to PayPal.
Your data is transmitted to PayPal on the basis of Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (contract performance). You may withdraw consent at any time; this does not affect the lawfulness of earlier processing.
Google Web Fonts
Type and scope of processing
We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To obtain these fonts, a connection is established with servers of Google Ireland Limited, during which your IP address is transmitted.
Purpose and legal basis
The use of Google Fonts is based on your consent under Art. 6(1)(a) GDPR and §25(1) TDDDG. We intend to transmit personal data to third countries outside the European Economic Area, particularly the USA. The data transfer to the USA is based on Art. 45(1) GDPR under the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified under the EU-US Data Privacy Framework (EU-US DPF).
Storage duration
The exact storage duration of the processed data is not under our control, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.
Font Awesome
Type and scope of processing
We use Font Awesome from Fonticons, Inc. to properly provide the content of our website.
Purpose and legal basis
The use of Font Awesome is based on your consent under Art. 6 Abs. 1 lit. a of the GDPR and § 25 Abs. 1 TDDDG.
We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. In cases where there is no adequacy decision by the European Commission, we have entered into other appropriate safeguards in accordance with Art. 44 ff. GDPR. These are – unless otherwise stated – Standard Contractual Clauses of the EU Commission under the Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these Standard Contractual Clauses can be viewed at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.
In addition, before transferring data to a third country, we obtain your consent under Art. 49(1), first sentence, point (a) GDPR. You may grant this consent via the consent manager or other forms and registrations. Please note that transfers to third countries may involve risks that are not fully known, such as processing by the security authorities of the third country. We may not know the exact scope or consequences, have no influence over them, and you may not become aware of them.
Storage duration
The exact storage duration of the processed data is not under our control, but is determined by Fonticons, Inc. Further information can be found in the privacy policy for Font Awesome CDN: https://cdn.fontawesome.com/privacy.
Source: Data Protection Configurator by Herold Unternehmensberatung