Privacy policy
Information on the processing of personal data pursuant to Art. 13/14 GDPR
Personal data (usually referred to just as "data" below) will only be processed by me to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.
Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the "GDPR"), "processing" refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.
The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under my own control or in conjunction with others. I also inform you below about the third-party components I use to optimize my website and improve the user experience which may result in said third parties also processing data they collect and control.
My privacy policy is structured as follows:
I. Information about me as the controller of your data
II. The rights of users and data subjects
III. Information about the data processing
I. Information about me as the controller of your data
The party responsible for this website (the "controller") for purposes of data protection law is:
Kumpel-IT.de
Fabian Augenstein
c/o POSTFLEX PFX-106-993
Emsdettener Straße 10
48268 Greven
Phone: +49 (0) 152 28995193
Email: [email protected]
II. The rights of users and data subjects
With regard to the data processing to be described in more detail below, users and data subjects have the right
- to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
- to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
- to the immediate deletion of data concerning them (cf. also Art. 17 GDPR), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
- to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
- to file complaints with the competent supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR). The supervisory authority responsible for me is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2-4
40213 Düsseldorf, Germany
www.ldi.nrw.de
In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.
Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller's future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.
III. Information about the data processing
Your data processed when using my website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.
Cookies
a) Session cookies
I use cookies on my website. Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information about you, such as your browser, location data, or IP address.
This processing makes my website more user-friendly, efficient, and secure, allowing me, for example, to display my website in different languages or to offer a shopping cart function.
The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.
If the processing does not serve to initiate or process a contract, my legitimate interest lies in improving the functionality of my website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.
When you close your browser, these session cookies are deleted.
b) Third-party cookies
If necessary, my website may also use cookies from companies with whom I cooperate for the purpose of advertising, analyzing, or improving the features of my website.
Please refer to the following information for details, in particular for the legal basis and purpose of such third-party collection and processing of data collected through cookies.
c) Disabling cookies
You can refuse the use of cookies by changing the settings on your browser. Likewise, you can use the browser to delete cookies that have already been stored. However, the steps and measures required vary, depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser or contact its maker for support.
If you prevent or restrict the installation of cookies, not all of the functions on my site may be fully usable.
Contact
If you contact me via email or the contact form, the data you provide will be used for the purpose of processing your request. I must have this data in order to process and answer your inquiry; otherwise I will not be able to answer it in full or at all.
The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR.
Your data will be deleted once I have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.
Server data
For technical reasons, the following data sent by your internet browser to me or to my server provider will be collected, especially to ensure a secure and stable website: These server log files record the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on my site visited, the date and time of your visit, as well as the IP address from which you visited my site.
The data thus collected will be temporarily stored, but not in association with any other of your data.
The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. My legitimate interest lies in the improvement, stability, functionality, and security of my website.
The data will be deleted within no more than seven days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.
Google Analytics
I use Google Analytics on my website, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".
Google Analytics helps me analyse website usage and measure the effectiveness of my marketing campaigns. The legal basis for this is Art. 6 para. 1 lit. a GDPR. The user can revoke consent to the use of Google Analytics in accordance with Art. 7 para. 3 GDPR at any time for the future via the "Cookie Settings" on my website.
Information such as time, location and frequency of website visits as well as interactions with the website (e.g. click paths, ads seen/clicked, clicks on links) including the user's IP address are transferred to a Google server in the USA and stored there for a maximum of 2 months.
Google LLC is part of the "Data Privacy Framework", for which the EU Commission has issued an adequacy decision in accordance with Art. 45 GDPR:
https://www.dataprivacyframework.gov/list
Google also records "demographic characteristics" and can create statistics that allow statements to be made about the age, gender and interests of site visitors. This is done through the automated analysis of advertising and information from third parties.
If the user has activated personalised ads in their Google account and agrees to Google Analytics, Google can analyse usage behaviour across devices - that is, across all devices that the user has linked to their Google account. Google creates models for cross-device conversions; only anonymous statistics are sent to me, no personal data.
If the user wishes to deactivate this cross-device analysis, he or she can deactivate the "Personalised Advertising" function in the settings of his or her Google account using the following link:
https://support.google.com/ads/answer/2662922?hl=de
I use Google Analytics with an anonymisation function. As a result, Google will shorten the user's IP address within the EU member states or in other contracting states to the EEA Agreement.
Google uses the data collected to evaluate the user's visit to the website and to compile reports on website activities for me. The data are also used to provide other services related to website and internet usage. Google may transfer this information to third parties where required by law, or where such third parties process the data on Google's behalf.
According to Google, under no circumstances will the user's IP address be linked to other Google data. Google offers further information and options for preventing data usage here:
https://www.google.com/intl/de/policies/privacy/partners
If the user does not agree to the collection, he or she can also prevent it by installing the browser add-on to deactivate Google Analytics.
Matomo Analytics
I use Matomo, an open-source web analytics software, on my website. Matomo is hosted on my own server in Germany; no data is shared with third parties or transferred to third countries.
Matomo records the following data on each page visit: the URL accessed, the referring website (referrer), the browser and version used, the operating system, and the user's IP address. The IP address is anonymised immediately after collection (the last two octets are set to "0"), making identification of individual persons impossible. Cookies are only set if the user has given consent to do so.
Processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time via my . Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Visit data is stored for a maximum of 13 months, after which it is automatically deleted.
Further information: https://matomo.org/privacy-policy/.
Google Tag Manager
I use the Google Tag Manager to integrate various functions on my website. This product comes from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".
The Google Tag Manager is used exclusively to integrate certain content into my website and to enable the management of these functions via an interface provided by Google.
When you access the website, the corresponding functions are loaded from a Google server, which may also be located in the USA. The user's IP address is processed in order to provide the functions.
The functions used are listed in my privacy policy. Any consent not granted by the user for certain functions will also be respected when using the Google Tag Manager.
Google LLC is also part of the "Data Privacy Framework", for which the EU Commission has issued an adequacy decision pursuant to Art. 45 GDPR:
https://www.dataprivacyframework.gov/list
The legal basis for use is Art. 6 para. 1 lit. f GDPR. My legitimate interest lies in the optimisation and economic operation of my website.
CloudFlare
To secure my website and to optimize loading times, I use the CloudFlare CDN (content delivery network). This is a service of Cloudflare Inc., 101 Townsend Street, San Francisco, California 94107, USA, hereinafter referred to as "CloudFlare".
The legal basis for collecting and processing this information is Art. 6 Para. 1 lit. f) GDPR. My legitimate interest lies in the secure operation of my website and in its optimization.
If you access my website, your queries are forwarded to CloudFlare servers. Statistical access data about your visit to my website is collected and CloudFlare stores a cookie on your terminal device via your browser. Access data includes
- your IP address;
- the page(s) on my site that you access;
- type and version of internet browser you are using;
- your operating system;
- the website from which you came prior to visiting my website (referrer URL);
- your length of stay on my site; and
- the frequency with which my pages are accessed.
The data is used by CloudFlare for statistical evaluations of the accesses as well as for the security and optimization of the offer.
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above.
CloudFlare offers further information about its data collection and processing as well your rights and your options for protecting your privacy at this link: https://www.cloudflare.com/privacypolicy/.
Google reCAPTCHA
My website uses Google reCAPTCHA v3 to protect my contact form against automated access (bots). This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google).
reCAPTCHA v3 analyses user behaviour in the background (including IP address, browser characteristics, and mouse movements) without requiring any visible interaction. Google receives personal data that may also be transferred to servers in the United States.
As this processing goes beyond what is technically necessary to operate the website, it is carried out solely on the basis of your consent pursuant to Art. 6 Para. 1 lit. a) GDPR. You may withdraw your consent at any time via my . Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Google offers detailed information at https://policies.google.com/privacy concerning the general handling of your user data.