Privacy Policy by ART+COM GmbH (artcom.de)

The information in this declaration applies to the processing of personal data on or via our website and is intended in particular to inform you of the scope of processing, the purposes of processing, the recipients, legal bases, storage periods and your rights. Personal data are all information relating to an identified or identifiable natural person, i.e. a human being (hereinafter also referred to as “data subject”), including for example your name, your address or your e-mail address. Processing” of personal data means in particular the collection, storage, use and transmission of such data.

I. Name and Address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

ART+COM GmbH
Prinzessinnenstraße 1
10969 Berlin
Germany

Phone +49 30 21001-0

info@artcom.de
www.artcom.de

II. Contact data of the data protection officer

The data protection officer can be consulted under the following contact details:

Data Protection Officer
c/o ART+COM GmbH
Prinzessinnenstraße 1
10969 Berlin
Germany

privacy@artcom.de

III.General information data processing
1. Legal basis for the processing of personal data

Insofar as the data subject has given consent to the processing of his or her personal data for one or more specific purposes, legal basis is Art. 6 para. 1 lit. a GDPR.

Insofar as the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, legal basis is Art. 6 para. 1 lit. b GDPR.

Insofar as the processing is necessary for compliance with a legal obligation to which the controller is subject, legal basis is Art. 6 para. 1 lit. c GDPR.

If processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, legal basis is Art. 6 para. 1 lit. f GDPR.

2. Data erasure and storage time

The personal data of the data subject will be erased or processing restricted as soon as the purpose of storage ceases to apply. In certain cases, data can be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject.

IV. Provision of the website and creation of log files
1. Description and extent of data processing

Every time you visit our website, our system automatically collects data and information from the computer system of the accessing device (computer, smartphone, tablet, etc.).

The following data is collected:

  1. Information about the browser type, the version used, installed plugins and the set language
  2. The operating system of the accessing device and its version
  3. The IP address of the accessing device
  4. Date and time of access and time spent on the site
  5. Loading time of the pages (average value for all accessed pages of the session)
  6. Websites from which the system of the accessing device reaches our website
  7. Websites that are accessed by the user device on our website
  8. This data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
2. Legal basis for data processing

Legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s device. For this the IP address of the user must remain stored for the duration of the session. The data is stored in log files to ensure and improve the functionality of the website and for statistical evaluations.

In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. Our legitimate interest in data processing also lies in these purposes.

4. Storage time

The data will be erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this will happen after seven days at the latest. Further storage is possible. In this case, however, the IP addresses of the users are erased or made anonymous, so that an identification of the accessing client is no longer possible.

5. Possibility of opposition and elimination

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

V. Usage of Cookies
1. Description and extent of data processing

Our website uses technically necessary cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. If a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic character string that enables a unique identification of the browser when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The following data is stored and transmitted in the cookies: Language settings (of website and operating system)

2. Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6 para 1 lit. f GDPR.

3. Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of our website for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change within our internet presence.

We need cookies for the following applications: Acceptance of language settings.

Our legitimate interest in the processing of personal data also lies in these purposes.

4. Storage time and possibility of opposition and elimination

Cookies are stored on the device you use to visit our website and are transmitted to our site. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be erased at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

VI. Contacting us by e-mail or phone
1. Description and extent of data processing

It is possible to contact us via the e-mail addresses provided on our website. In this case, the user’s personal data transmitted by e-mail will be stored, including the content of the messages transmitted.

You can also contact us via the telephone numbers provided. If you contact us by telephone, we generally collect the data that you provide to us or which is automatically transmitted with your call. This includes your name, your request and your telephone number.

2. Legal basis for data processing

The legal basis for the processing of data transmitted in the course of contacting us by e-mail or telephone is Art. 6 para. 1 lit. f GDPR. If the contact aims at the conclusion of a contract or if it takes place within the framework of an existing contractual relationship, then additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

3. Purpose of data processing

The processing of personal data serves us solely to process the establishment of contact. This is also our legitimate interest in the processing of the data.

4. Storage time

The data will be erased as soon as the purpose of its collection is no longer given. For the personal data sent by e-mail or transmitted as part of a telephone contact, this is the case when the conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the facts in question have been finally clarified.

In the event of rejection, applicant data will generally be erased no later than three months after notification of the rejection to the applicant. A longer storage takes place only if you have given us your consent.

If data arises in the course of communication, which we are obliged to reposit or store by tax, commercial law or other regulations, then the erasure of this data will only take place after expiry of the respective statutory retention or storage periods. The legal basis for this data storage is Art. 6 para. 1 lit. c GDPR.

VII. Newsletter
1. Description, extent and purpose of data processing

On our website you have the opportunity to register for our newsletter. We will then store and use only your e-mail address to send you information about our company by e-mail at regular intervals.

2. Legal basis for data processing

The legal basis for the processing of data is Art. 6 para. 1 lit. a GDPR.

3. Storage time and revoke of consent

You have the possibility to unsubscribe from our newsletter at any time and thus to revoke your consent, e.g. by sending us an e-mail.

If you revoke your consent, we will no longer use your data to send you our newsletter. However, we will store your e-mail address and the proof of your consent for a period of three years starting at the end of the year in which we last sent you our newsletter before your revocation, so that we can prove the consent in the event of a dispute. We will subsequently delete the data unless we need it for other purposes stated in this declaration, e.g. because you still have a customer account with us.

4. Service provider

We use Newsletter2Go as a service provider for our newsletter mailings. For this reason, we have concluded a contract with Newsletter2Go for commissioned data processing according to GDPR. Within the scope of your newsletter registration, you agree that the data you have entered will be transmitted to Newsletter2Go.
Please note the data privacy statement and general terms and conditions of Newsletter2Go.

VIII.Web analysis by Matomo
1. Description and extent of data processing

On our website we use the open source software tool Matomo (formerly PIWIK) to analyse the surfing behaviour of our users. The software places a cookie on the user’s device (for cookies see above). If individual pages of our website are accessed, the following data is stored:

  1. Two bytes of the IP address of the user’s calling system
  2. The accessed website
  3. The website from which the user has accessed the website (“referrer”)
  4. The sub-pages accessed from the website visited.
  5. The time spent on the website
  6. The frequency with which the website is accessed

The software runs exclusively on the servers of our website. The personal data of users is only stored there. The data will not be passed on to third parties.

The software is configured so that the IP addresses are not completely stored, but 2 bytes of the IP address are masked (e.g.: 192.168.xxx.xxx). In this way it is no longer possible to assign the shortened IP address to the calling device.

2. Legal basis for the processing of personal data

The legal basis for processing users’ personal data is Art. 6 para. 1 lit. f GDPR.

3. Purpose of data processing

The processing of users’ personal data enables us to analyze the web surfing behavior of our users. We are in a position to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness. For these purposes, it is also in our legitimate interest to process the data. By anonymizing the IP address, users’ interest in protecting their personal data is sufficiently taken into account.

4. Duration of storage

Due to the shortening of the IP addresses during storage, they can no longer be assigned to a specific device or user and therefore no longer represent personal data. Within the scope of our use of Matomo, no personal data is stored. Personal data is only processed as part of the collection and shortening of IP addresses.

5. Possibility of opposition and elimination

Cookies are stored on the user’s computer and transmitted to our site. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be erased at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.


IX. Rights of the data subject

If your personal data are processed, you are a data subject within the meaning of the GDPR and you have the following rights against the controller (in the case of the fulfilment of further conditions regulated in the relevant regulations, if applicable):

  • The right of access according to Art. 15 GDPR
  • The right to rectification according to Art. 16 GDPR
  • The right to erasure (“right to be forgotten”) according to Art. 17 GDPR
  • The right to restriction of processing according to Art. 18 GDPR
  • The right to a notification according to Art. 19 GDPR
  • The right to data portability according to Art. 20 GDPR
  • The right to object according to Art. 21 GDPR
  • The right not to be subject to a decision based solely on automated processing according to Art. 22 GDPR
  • The right to withdraw consent to the processing of personal data according to Art. 7 para. 3 GDPR

To assert these rights, please contact our data protection officer at the aforementioned address.

Without prejudice to any other administrative or judicial remedy, you also have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you are staying, working or suspected of infringing, if you believe that the processing of personal data concerning you infringes the GDPR.