Data protection declaration in accordance with § 5 and § 13 of the German Telemedia Act (TMG) Information in accordance with Articles 13, 14, 21 and 49 of the General Data Protection Regulation (DSGVO)

 

We hereby inform you about the processing of your personal data by us and the claims and rights to which you are entitled under the data protection regulations.

Responsible body for data processing

Altmühltaler Mineral Fountain GmbH

Bahnhofstr. 48

91757 Treuchtlingen

Telephone: 09142/803-0

fax: 09142/803-88

Mail: info@altmuehltaler.de

Email: datenschutz@misipi.de

Telephone: 09142/803-0

Sources and data for the processing of personal data

We process personal data that we receive from you in the course of your internet use or that you have transmitted to us via the contact form.

Data is stored in server log files, which are collected and automatically stored by the provider and mostly transmitted to us by your browser. These are:

• Referrer URL
• Host name of the accessing computer
• Date and time of the server request
• Name of the requested file
• Page from which the file was requested
• Web browser and operating system used
• (Complete) IP address of the requesting computer
• Transmitted data volume

Furthermore, we may process other data comparable to the above categories.

We collect the listed data to ensure a smooth connection setup of the website and to enable a comfortable use of our website by the users. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of the data or the log files is Art. 6 para. 1 lit. f) DSGVO.

Purpose of the processing and legal basis

We process personal data in accordance with the provisions of the European Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG):

Within the scope of our legitimate interest (Art. 6 para. 1 lit. f) DSGVO)

Insofar as necessary, we process your data beyond the actual fulfilment of a possible contract with you in order to protect the legitimate interests of us or third parties. We collect the data listed above to ensure a smooth connection setup of the website and to enable a comfortable use of our website by the users. In addition, the log file serves to evaluate system security and stability as well as for administrative purposes. In addition, we store your data for reasons of technical security, in particular to defend against attempted attacks on our web server.

Examples in this context:

• Assertion of legal claims and defence in legal disputes;
• Ensuring IT security and IT operations;
• Measures for business management and further development of services

In the context of your consent (Art. 6 para. 1 lit. a) DSGVO and Art. 49 para. 1 lit. a) DSGVO)

Insofar as you have given us consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent. Consent given can be revoked at any time.

Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.

Due to legal requirements, Art. 6 lit. c) DSGVO, or in the public interest, Art. 6 para. 1 lit. e) DSGVO

In addition, we are subject to various legal obligations, i.e. legal requirements (e.g. commercial law, tax laws, etc.). Insofar as data is processed in this regard, this is done exclusively on the basis of these regulations.

Passing on the data

Within the company, those departments receive your data that need it to fulfil our contractual and legal obligations. Processors appointed by us (Art. 28 DSGVO) may also receive data for these purposes.

With regard to the transfer of data to recipients outside the company, please note that we will only transfer your data if this is permitted or required by law, if you have given your consent or if we are authorised to provide information. Under these conditions, recipients of personal data can be, for example: public offices and institutions (e.g. public prosecutor's office, police, supervisory authorities) if there is a legal or official obligation or other offices (e.g. lawyers, tax consultants, auditors).

Further data recipients may be those bodies for which you have given us your consent to transfer data.

Duration of storage

To the extent permitted by law, we process and store your personal data, in particular as long as this is necessary to fulfil the respective purposes.

Data transfer to third countries

Data is only transferred to third countries (countries outside the European Economic Area - EEA) if this is required by law or you have given us your consent. We will inform you separately about the details, if required by law.

Use of cookies

Our website does not use cookies.

 

Google Fonts

The "Google Fonts" service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") is integrated on our homepage. We have concluded an order processing agreement with Google in accordance with Art. 28 DSGVO. If data is transferred to a third country, this is based on the existence of the standard contractual clauses in force since September 2021.

You can find more information on this under

https://business.safety.google/gdpr/#international-transfers

With Google Fonts we can use fonts on our website and do not have to upload them on our own server. Google Fonts is necessary to keep the quality of our website high.

We use Google Fonts to be able to present our entire online service in a uniform manner.

The legal basis is your consent pursuant to Art. 6 para. 1 lit. a) DSGVO.

You can find the privacy policy at:

https://www.google.com/policies/privacy/.

Opt-out: https://adssettings.google.com/authenticated.

Contact by e-mail

If you send us enquiries by e-mail, the information you provide in your e-mail, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. Your name and e-mail address are required. Under no circumstances will we pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f) DSGVO and, if applicable, Art. 6 Para. 1 lit. b) DSGVO if your request is aimed at concluding a contract. Your data will be deleted after your request has been processed, provided that there are no legal obligations to retain data. You can object to the processing of your personal data at any time in the case of Art. 6 para. 1 lit. f) DSGVO.

Consent Management Tool

Your rights

Below you will find information on which data subject rights the applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:

• Right to information:

The right to request information about your personal data processed by us in accordance with Art. 15 DSGVO.

• Right of rectification:

The right, in accordance with Art. 16 DSGVO, to demand the immediate correction of incorrect or completion of your personal data stored by us.

• Right to erasure:

The right, pursuant to Article 17 of the GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.

• Right to restriction of processing:

The right to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO.

• Right to data portability pursuant to Art. 20 DSGVO:

You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible

• Right of appeal:

You have the right to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of the federal state where our registered office is located or, if applicable, that of your usual place of residence or workplace.

• Right of withdrawal:

Right to revoke consent given in accordance with Art. 7 (3) DSGVO: You have the right to revoke consent to the processing of data once given at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;

Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) of the GDPR (data processing in the public interest) and Article 6(1)(f) of the GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) of the GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

The objection can be made without formalities and should preferably be addressed to:

Altmühltaler Mineral Fountain GmbH

Bahnhofstr. 48

91757 Treuchtlingen

Telephone: 09142/803-0

fax: 09142/803-88

Mail: info@altmuehltaler.de

 

 

Obligation to provide data

 

When using the internet, you only need to provide the personal data that is required for use or that we are legally obliged to collect. Without this provided data, meaningful use may be restricted or impossible.

External links

Where links are provided to other websites, we have neither influence nor control over the linked content and the data protection provisions there. We recommend that you check the data protection declarations of linked websites when you access them in order to determine whether and to what extent personal data is collected, processed, used or made available to third parties.

Automated decision-making in individual cases

Fully automated decision-making pursuant to Art. 22 DSGVO does not take place. Should we use these procedures in individual cases, we will inform you about this separately if this is required by law.

Use of data for profiling (scoring)

We do not process your data with the aim of evaluating certain personal aspects (profiling). In the context of data collection by tracking services, your data is used to evaluate your usage behaviour and possibly to create movement profiles.