1. Scope

This privacy policy informs users about the nature, scope and purpose of the collection and use of their data by the responsible provider.

The legal framework for data protection is formed by the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) and the German Telemedia Act (Telemediengesetz, TMG).

The website operator, Schaltzeit GmbH, takes the protection of your data very seriously and treats your personal data confidentially and in accordance with the statutory provisions.

Please note that data transmission over the internet may, in principle, be subject to security vulnerabilities. Complete protection against access by third parties is not possible.

2. Provider and controller within the meaning of data protection law

Schaltzeit GmbH
André Winzer
John-Schehr-Str. 34
10407  Berlin
Phone: +49 30 61289260
Fax: +49 30 61289635
Send an email

3. Who has been appointed data protection officer in our company?

Our company has fewer than 10 employees; we are therefore not required to appoint a data protection officer. All employees are committed to data protection.

4. Your rights in connection with data protection – your rights to access, rectification, blocking, erasure and objection

You have the right, upon request and free of charge, to obtain information about the personal data we have stored about you and/or to request its rectification, blocking or erasure. You also have the right to restriction of processing, the right to object to processing and the right to data portability.

Exceptions: where the data storage is required for the conduct of business or the data is subject to statutory retention obligations.

For these purposes, please contact our managing director (contact details: see section 2). In order to be able to take a blocking of data into account at any time, it is necessary to keep the data in a blocking file for control purposes. If there is no statutory obligation to archive the data, you may also request its erasure. Otherwise, we will block the data if you so wish.

5. How can you lodge a complaint?

You have the right to lodge a complaint regarding data processing with the data protection supervisory authority responsible for us.

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219 Visitor entrance: Puttkamerstr. 16 – 18 (5th floor)
10969 Berlin
Phone: +49 30 13889-0
Fax: +49 30 2155050
Email: mailbox@datenschutz-berlin.de

6. For what purpose is your data used and on what legal basis may we use it – collection of general information

Each time this website is accessed, information is automatically collected by us or by our web hosting provider. If you use our website solely to find out about our company, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (the legal basis is Art. 6(1)(f) GDPR). This information, also referred to as server log files, is of a general nature and does not allow any conclusions to be drawn about you personally:

The following data is logged in this way:

Website visited
Date & time of access
Amount of data sent in bytes
Browser and version used, including installed plugins
Operating system used
IP address and device used
The domain name of your internet service provider
The referrer URL (the page from which you accessed our website)
Time zone difference from Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code

Without this data, it would in some cases be technically impossible to deliver and display the content of the website. The collection of this data is therefore strictly necessary. In addition, we use the anonymous information for statistical purposes. It helps us optimize our website and its technology. We also reserve the right to review the log files retrospectively if there is any suspicion of unlawful use of our website.

7. Use of cookies

This website uses cookies. These are text files that are stored on your computer by the server. They contain information about the browser, the IP address, the operating system and the internet connection. We do not pass this data on to third parties or link it to personal data without your consent.

Cookies serve two main purposes. They help us make it easier for you to navigate our website and enable the website to be displayed correctly. They are not used to introduce viruses or launch programs.

Users can also access our website without cookies. To do so, the corresponding settings must be changed in the browser. Please consult your browser’s help function to find out how to disable cookies. Please note, however, that this may impair some functions of this website and reduce its ease of use.

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and the related consents, we use the consent tool “Real Cookie Banner.” Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/.

The legal bases for the processing of personal data in this context are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

The websites www.aboutads.info/choices (USA) and www.youronlinechoices.com/uk/your-ad-choices (Europe) allow you to manage online advertising cookies.

This website uses the following types of cookies, the scope and functioning of which are explained below:

Transient cookies (see a)
Persistent cookies (see b).

a) Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. They store a so-called session ID, which allows various requests from your browser to be assigned to a single session. This enables your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.

b) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings.
You can configure your browser settings as you wish and, for example, refuse to accept third-party cookies or all cookies. Please note that you may then not be able to use all functions of this website.

8. Data minimization

In accordance with the principles of data avoidance and data minimization, we store personal data only for as long as necessary or as required by law (statutory retention period). If the purpose for which the information was collected no longer applies or the retention period expires, we block or erase the data.

9. Changes to our privacy policy

To ensure that our privacy policy always complies with current legal requirements, we reserve the right to make changes at any time. This also applies if the privacy policy has to be adapted due to new or revised services, for example new service offerings. The new privacy policy will then apply the next time you visit our website.

10. What other personal data do we collect?

Definition: Personal data is any information that can be used to clearly identify a person. It is therefore data that can be traced back to a person. Such personal data includes first and last name, telephone number and email address. Information on hobbies, memberships and preferences, as well as websites visited, is also considered personal data. The provider collects, uses and, where applicable, discloses this data only if expressly permitted by law or if the user consents to the collection, processing, use and disclosure of the data.

If you wish to arrange an appointment or send us a question by email or via our contact form, the data you provide (your email address and, where applicable, your name and telephone number) will be stored by us in order to schedule an appointment or answer your inquiry. We erase the data arising in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply (the legal basis is Art. 6(1)(b) GDPR).

10.1 Registration on our website

If you register on our website to use personalized services, personal data is collected. This includes your name, address, telephone number and email address as contact and communication data. Registration enables access to services and content that are only available to registered users. If necessary, registered users can change or delete the data provided during registration at any time. Upon request, we will of course inform you which personal data has been collected and stored. In addition, we will rectify or erase the data upon request, provided that no statutory retention obligations prevent this. For any questions and requests for rectification or erasure of data, please use the contact details provided in this privacy policy.

10.2 Newsletter

If you subscribe to our newsletter, we use the data you enter exclusively for this purpose or to inform you about circumstances relevant to this service or to your registration. We do not pass this data on to third parties. A valid email address is required to receive the newsletter. We also store the IP address from which you subscribe to the newsletter and the date on which you subscribe. This data serves as evidence in the event of misuse, should someone else’s email address be registered for the newsletter. To further ensure that an email address is not improperly added to our mailing list by third parties, we use the legally compliant “double opt-in” procedure. As part of this procedure, the newsletter subscription, the sending of the confirmation email and the receipt of the subscription confirmation are logged. You may withdraw your consent to the storage of your data and email address and their use for sending the newsletter at any time. For this purpose, we provide a link in every newsletter and on the website. You can also notify us of your withdrawal using the contact options listed in this document. The newsletters of Schaltzeit GmbH contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in emails sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, Schaltzeit GmbH can see whether and when an email was opened by a data subject and which links in the email were accessed by the data subject. Such personal data collected via the tracking pixels contained in the newsletters is stored and analyzed by the controller in order to optimize the newsletter mailing and to tailor the content of future newsletters even better to the interests of the data subject. This personal data is not passed on to third parties. Data subjects are entitled at any time to withdraw the separate declaration of consent given in this respect via the double opt-in procedure. After withdrawal, this personal data will be erased by the controller. Schaltzeit GmbH automatically treats unsubscribing from the newsletter as a withdrawal of consent.

10.3 Contact form

If you contact us via the online form or by email, we store the information you provide in order to answer your inquiry and to be able to ask any follow-up questions.

10.4 Comment function

If comments or other contributions are written and published on our website, we store the IP address, the username and the time of creation. This data is collected for security reasons, as the provider can be held liable for unlawful content (prohibited propaganda, insults, etc.), even if it was created by third parties. In such a case, the information serves to establish the identity of the author.

10.5 Provision of paid services

In order to provide paid services, we request additional data, such as payment details. To ensure the security of your data during transmission, we use state-of-the-art encryption methods (such as SSL) via HTTPS.

10.6 Integration of third-party services and content

Our website sometimes includes content, services and features from other providers. These include, for example, maps provided by Google Maps, videos from YouTube, and graphics and images from other websites. In order for this data to be retrieved and displayed in the user’s browser, the transmission of the IP address is strictly necessary. The providers (hereinafter referred to as “third-party providers”) therefore receive the IP address of the respective user. Although we endeavor to use only third-party providers that need the IP address solely to deliver content, we have no influence on whether the IP address may be stored. In that case, this process serves, among other things, statistical purposes. Where we are aware that the IP address is stored, we will inform our users accordingly.

Facebook: Social network; service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; website: https://www.facebook.com; privacy policy: https://www.facebook.com/about/privacy; opt-out: ad settings: https://www.facebook.com/settings?tab=ads.
Google Maps: Map service; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; privacy policy: https://policies.google.com/privacy; opt-out: https://adssettings.google.com/authenticated.
Instagram: Social network; service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; website: https://www.instagram.com; privacy policy: https://instagram.com/about/legal/privacy.
LinkedIn: Social network; service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; website: https://www.linkedin.com; privacy policy: https://www.linkedin.com/legal/privacy-policy; opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Twitter (now X): Social network; service provider: X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; EU representative: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland; privacy policy: https://twitter.com/de/privacy, (settings) https://twitter.com/personalization.
YouTube: Social network; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; privacy policy: https://policies.google.com/privacy; opt-out: https://adssettings.google.com/authenticated.

11. Data protection for applications and in the application process

The controller collects and processes the personal data of applicants for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case if an applicant submits application documents to the controller electronically, for example by email or via a web form on the website. If the controller concludes an employment contract with an applicant, the data transmitted will be stored for the purpose of handling the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be automatically erased two months after notification of the rejection decision, provided that no other legitimate interests of the controller preclude erasure.

Other legitimate interests in this sense include, for example, a burden of proof in proceedings under the German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz, AGG).

12. Legal basis for processing

Art. 6(1)(a) GDPR serves as the legal basis for our company for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, with processing operations necessary for the delivery of goods or the provision of any other service or consideration, the processing is based on Art. 6(1)(b) GDPR. The same applies to processing operations necessary to take steps prior to entering into a contract, for example in the case of inquiries about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6(1)(c) GDPR. In rare cases, the processing of personal data may become necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured on our premises and their name, age, health insurance details or other vital information had to be passed on to a doctor, a hospital or other third parties. The processing would then be based on Art. 6(1)(d) GDPR.

Finally, processing operations may be based on Art. 6(1)(f) GDPR. Processing operations not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, the legislator took the view that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47, sentence 2 GDPR).

13. Legitimate interests pursued by the controller or by a third party

Where the processing of personal data is based on Art. 6(1)(f) GDPR, our legitimate interest is to carry out our business activities for the benefit of the well-being of all our employees and shareholders.

14. Period for which the personal data will be stored

The criterion for the period of storage of personal data is the respective statutory retention period. After this period expires, the corresponding data is routinely erased, provided it is no longer required for the performance or initiation of a contract.

15. Statutory or contractual requirements to provide the personal data; necessity for the conclusion of a contract; obligation of the data subject to provide the personal data; possible consequences of failure to provide the data

We would like to inform you that the provision of personal data is partly required by law (e.g., tax regulations) or may also result from contractual provisions (e.g., information on the contracting party).

In some cases, it may be necessary for the conclusion of a contract that a data subject provides us with personal data that must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data if our company concludes a contract with them. Failure to provide the personal data would mean that the contract with the data subject could not be concluded.

Before providing personal data, the data subject must contact our data protection officer. Our data protection officer will inform the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what the consequences of failure to provide the personal data would be.

16. Existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

Sources:

The above information is based in part on wording suggested in the following templates:

“Datenschutzerklärung für Websites” [Privacy Policy for Websites, in German] from Formularhandbuch Datenschutzrecht, Koreng/Lachenmann, C.H. Beck Verlag, 2nd edition, 2018.
From www.org
the privacy policy configurator by mein-datenschutzbeauftragter.de
datenschutzerklaerung-online.de