The protection of your personal data is very important to us. Our processing of personal data is therefore designed to be fully compliant with applicable data protection laws and regulations.
With this policy we intend to clarify and inform you – our customer – about which personal data we process, the purposes of said processing, how this processing is performed, who has access to your personal data, for how long we process this data and how you can exercise your rights with regard to our data processing.
For the personal data required by us for the performance of the agreed service, "Controller" within the meaning of Art. 4 No. 7 of the European General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other data protection laws and regulations is:
c/o Postflex #3532
Emsdettener Str. 10
Phone: (+49) 211 82204013
What personal data do we process about you?
Personal data is any information relating to an identified or identifiable natural person. We process data that you provide voluntarily to us, data that we collect in an automated fashion when you visit our premises, events or websites and data processed when you access and/or use our products and services.
We may process the following personal data about our customers as inventory data: your name, your email address, your phone number and (if applicable) fax number, your job title, your full personal address, the organization you work for (if applicable to the transaction), your gender, your language preference, the IP addresses you use to connect to our systems, your account name, the services you order, your financial data including bank account or credit card information, your login details.
We may also request additional personal data if required for the specific service you requested.
Our processing of third-party data
Legal Bases for Processing Your Data
In principle, we only process data when a legal basis is available. We specify the legal basis in the segments about data processing, but in general, we are permitted to process your personal data if one of the following conditions applies.
– The data subject's consent for the processing of personal data (Art. 6 I a) GDPR).
– Processing personal data as a necessity for the fulfilment of a contract in return for payment or free of charge. This shall also apply to processing operations necessary for the implementation of pre-contractual measures (Art. 6 I b) GDPR).
– The processing is necessary for the fulfilment of a legal obligation to which we are subject (Art. 6 I c) GDPR).
– The processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights, and fundamental freedoms of the data subject do not outweigh the above-mentioned interests (Art. 6 I f) GDPR).
Purposes for processing
The data you transmit to us upon requesting a service (or for correction, renewal or updates of service requests) is required to establish a contractual relationship between you and us, for purposes required for our provision of requested services as well as auxiliary services to you, for proper and secure management of your customer account, to prevent abusive use of our services, to enable us to provide information on expiration and required renewals of services and to allow us to comply with applicable legal obligations. The legal basis for such processing is Art. 6 I b) GDPR.
We may also transfer your personal data to third parties to safeguard legitimate interests of such third parties in accordance with Art. 6 I f) GDPR, except where such interests are overridden by your fundamental rights and freedoms.
To whom do we forward your personal data?
To the extent permitted by law, your personal data may be disclosed to the following parties:
We may forward your personal data to third-party service providers directly involved in the provision of our service to you.
We may forward your personal data to third-party payment providers directly involved in the provision of payment services for payment facilities chosen by you to pay for our services, such as a bank, credit card service providers, PayPal and others. This may require the transfer of your personal data to organizations and/or servers located outside the European Union.
To ensure business continuity, your personal data may be provided to escrow service providers as well as to backup storage providers.
For support purposes, we may provide access to your personal data to providers of third-party support services.
We will never sell your personal data to anyone.
Further data usage
We will only use the data for the purposes of advertising, customer service or market research if such use is necessary to provide or improve the service and if the customer has provided prior consent in accordance to Art. 6 I a) GDPR. Such consent may be revoked at any time. We will store your personal data that is processed for business purposes for a minimum of one year after the termination of the service it was collected for, or longer if required by legal requirements, such as the tax code. Data processed for other purposes is processed no longer than necessary for the purposes for which your data is processed or until all applicable legal requirements are met.
Your rights with regard to your data
You may assert the following rights free of charge against any person responsible for the processing of your personal data:
- Right to withdraw your consent (Art. 7 III GDPR);
- Right of access: You may request access to your personal information that we process ( 15 GDPR);
- Right to rectification (Art. 16 GDPR): If the information concerning you is not (or is no longer) accurate, you may request a rectification. If your data is incomplete, you may request their completion.
- Right to erasure (Art. 17 GDPR): You can request the erasure of your personal data.
- Right to restriction of processing (Art. 18 GDPR): you have the right to request a restriction on the processing of your personal data.
- Right to data portability (Art. 20 GDPR);
- Right to object (Art. 21 GDPR): You have the right to object to the processing of your personal data at any time for reasons relating to your special situation. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defence of legal claims.
For the assertion of claims, please contact the controller (find contact details above).
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice pursuant to Art. 77 I GDPR.
Automated Decision Making
We do not use automated decision making, including profiling.
Provision of expatimprov.com for informational use (log files)
For the informational use of our website, you do not usually have to actively enter any data. Each time you use the Internet, your browser transmits certain information which we store in so-called log files, e.g:
Date and time of accessing one of our web pages;
- your browser type;
- the browser settings;
- the operating system used;
- the last page you visited;
- the amount of data transferred and the access status (file transfer, file not found, etc.);
- your IP address;
- Date and time of retrieval of one of our web pages.
When using our website for information purposes, we collect and use this data exclusively in non-identifiable form. This is done to enable the use of the web pages you have accessed and to improve our website. We only store your IP address for the duration of your visit to access and use the website for information purposes. Further evaluation will only take place in accordance with the following provisions based on your consent.
The processing of the above-mentioned data is necessary for the correct presentation of our website and to ensure stability and security for the performance of the website in accordance with Art. 6 I f) GDPR.
In order to operate this website, we use a host provider to process meta and communication data of our website users on our behalf and on the basis of our legitimate interests in providing this website efficiently and securely in accordance with Art. 6 I f), Art. 28 GDPR.
Contact form, e-mail enquiries
Our contact form is designed so that you can easily get in touch with us. To process and assign your enquiries, we need your name or pseudonym, e-mail address and message. Depending on the content of your enquiry, the data provided in the contact form will be processed based on your (presumed) consent pursuant to Art. 6 I a), Art. 7 GDPR or pursuant to Art 6 I b) GDPR in connection with existing contractual performance obligations or the implementation of pre-contractual measures.
You can also contact us by e-mail. Depending on the content of your enquiry, the data transmitted by e-mail will be processed based on your consent pursuant to Art. 6 I a), Art. 7 GDPR or pursuant to Art. 6 I b) GDPR for existing contractual performance obligations or the implementation of pre-contractual measures.
Cookies and other tracking technologies
When you visit our websites, we may request your approval to store certain information on your devices in the form of a cookie in order to better provide our services to you. Denial to accept our cookies may result in a loss of functionalities on our websites and user interfaces for you.
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
In case IP anonymization is activated on this website, your IP address will be truncated within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and truncated there. The IP anonymization is active on this website.
Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing them other services relating to website activity and internet usage.
The legal basis is your consent (Art. 6 I a) GDPR). Upon the first visit to our website, we ask for your consent. Consent may be withdrawn at any time. This can be done by deleting the cookies in your browser. Another possibility is the browser addon provided by google, which deactivates Google Analytics. You can download it here: https://tools.google.com/dlpage/gaoptout?hl=dehttps://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser Addon or within browsers on mobile devices, you can click this link in order to opt-out from being tracked by Google Analytics within this website in the future (the opt-out applies only for the browser in which you set it and within this domain).
An opt-out cookie will be stored on your device, which means that you'll have to click this link again if you delete your cookies.
This website uses the Google Maps API to visually display geographic information. When using Google Maps, Google (Google Inc., 1600 Amphitheater Parkway, Mountain View, California, 94043) also collects, processes and uses data about the use of Maps features by visitors to the websites.
The legal basis for the use of Google Maps and the associated data processing is Art. 6 I f) GDPR, our "legitimate interest". This is understood to mean both legal and economic or ideal interests recognized by the legal system. Our legitimate interest in this case is to design our website to meet the needs of our customers.
This website uses Google reCAPTCHA in certain cases to prevent automated programs/bots from using text fields. This increases the security of our website and avoids SPAM. This is also our legitimate interest and fulfils our legal obligation (Art. 6 I c) GDPR).
The data collected is hardware and software information, e.g. device and application data and the results of security checks. This data is transmitted to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The data is not used for personalized advertising.
Google Web Fonts
This site uses web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This may also result in the transmission of personal data to the servers of Google LLC. in the USA. In this way, Google learns that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 I f) GDPR. If your browser does not support web fonts, a standard font from your computer will be used.
Changes to this policy
Please note that the data protection information may be changed at any time with due regard to the applicable data protection regulations. The version being made available on our website at the time of your order or last visit to our website applies.