Die Stromfritzen

Privacy

This is a courtesy translation. Only the German version is legally binding. Read the German original

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data means all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Kay Braune
Die Stromfritzen GmbH
Ernst-Thälmann-Straße 42
15370 Fredersdorf
Germany
Phone: +49 3343 9578526
Email: kontakt@die-stromfritzen.de

The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data collection when you visit our website

2.1 When you use our website purely for information, i.e. if you do not register or otherwise send us information, we only collect the data that your browser transmits to the server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our website visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referrer from which you reached the page
  • Browser used
  • Operating system used
  • IP address used (anonymised where applicable)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files subsequently should there be concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the padlock symbol in your browser bar.

Cookies and tracking: this website does not set any cookies and does not use any analytics or tracking services. No content is loaded from third-party providers; fonts and images are stored on our own web space.

3) Contacting us

When you contact us (e.g. by email or phone), personal data is collected. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted once your enquiry has been fully dealt with, unless statutory retention obligations prevent this.

To receive and manage incoming emails to our @die-stromfritzen.de addresses, we use Microsoft 365 (Exchange Online, Microsoft Ireland Operations Limited) as a processor.

The contact form on this website does not transmit any data to our server. When you send it, your own email program opens with a prepared message to kontakt@die-stromfritzen.de; the data only reaches us when you send this email yourself.

4) Website functions: web fonts

This site uses so-called web fonts for the uniform display of fonts. The font files are not hosted by an external provider but are delivered together with the other page data from our own hosting (see section 7). When a page is called up, your browser therefore does not establish its own connection to a third-party font server, and no data, in particular no IP address, is transmitted to a font provider.

5) Rights of the data subject

5.1 Applicable data protection law grants you the following data subject rights vis-à-vis the controller with regard to the processing of your personal data:

  • Right of access under Art. 15 GDPR
  • Right to rectification under Art. 16 GDPR
  • Right to erasure under Art. 17 GDPR
  • Right to restriction of processing under Art. 18 GDPR
  • Right to notification under Art. 19 GDPR
  • Right to data portability under Art. 20 GDPR
  • Right to withdraw consent given under Art. 7(3) GDPR
  • Right to lodge a complaint with a supervisory authority under Art. 77 GDPR

5.2 Right to object

If we process your personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing.

6) Duration of storage of personal data

The duration of storage of personal data is based on the respective legal basis, the purpose of processing and, where relevant, statutory retention periods.

Otherwise, personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

7) Hosting and content delivery network (CDN)

Our website is hosted by the following provider and delivered via its content delivery network:

Cloudflare, Inc.
101 Townsend Street
San Francisco, CA 94107
USA

Cloudflare is used to provide our online offering securely, quickly and reliably through a professional provider (Art. 6(1)(f) GDPR). When you visit our website, Cloudflare collects server log files, including your IP address, for technical reasons in order to ensure operation and to be able to detect and fend off attacks. The data processed includes in particular:

  • website accessed
  • date and time of access
  • amount of data transferred
  • Source/referrer from which you reached the page
  • browser used
  • operating system used
  • IP address

Cloudflare processes this data on our behalf and according to our instructions as a processor within the meaning of Art. 28 GDPR, on the basis of the Cloudflare Data Processing Addendum.

As Cloudflare, Inc. is based in the USA, a transfer of personal data to this third country during processing cannot be ruled out. According to its own information, Cloudflare is self-certified under the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework. In the event that a certification does not take effect or is not applicable, Cloudflare additionally relies on EU standard contractual clauses.

Further information on data protection at Cloudflare can be found at: https://www.cloudflare.com/privacypolicy/