Privacy Policy

Privacy Policy

for the website crwittig.com as of March 2019.

When operating the website crwittig.de (“Website”), data is processed that relates to natural persons or can be related to natural persons (personal data). With this privacy policy, I would like to inform visitors about what data is involved, in what way it is processed and what rights visitors have as data subjects.

This privacy policy fulfills the information requirements of Article 13 of the General Data Protection Regulation (GDPR). It is based on the definitions of Art. 4 GDPR.

Controller

I, attorney-at-law C. Rocco Wittig, am the controller of this website. A data protection officer has not been appointed. Data subjects may contact me and my team directly with questions regarding data protection in the operation of the website and the assertion of data subject rights. The e-mail address datenschutz [at] crwittig.de is available for this purpose.

Data processing, purposes and legal bases

Neither I nor the processor I have commissioned to operate the website (Strato AG) can draw direct conclusions about the identity of visitors.

Connection and page setup as well as display of the website

The connection and page setup requires the retrieval of the IP address of the end device used by the visitor as well as information about the browser used on the end device. In addition, session cookies are used. Session cookies temporarily store the Internet call and are deleted when the browser is closed. The collection, processing and use of this data is for technical and administrative purposes of the connection establishment and its stable maintenance as well as for the optimal page display for the respective end device.

The collection, processing and use of the data is carried out for the fulfillment of a contract to which the data subject is a party, or it is necessary for the implementation of pre-contractual measures, which are carried out at the request of the data subject (Art. 6 para. 1 p. 1 lit b GDPR).

Statistics and information or data security

In addition, log data of website visits, such as accesses to image or HTML files, are collected. These data are collected in a log file. Based on the log data, visits to the website are statistically recorded and can be analyzed by me if necessary. In addition to the statistical analysis, the data processing also serves to optimize the operation of the website and to ensure the confidentiality, availability and integrity of the website, in particular to be able to detect and defend against attacks.

The following categories of log data are collected, processed and used in connection with the domain crwittig.de: Client IP address, request line (path of the destination address without the domain), status code (e.g. 404- “requested website does not exist under the specified URL”), size of the response body (size of the temporarily downloaded files), referer sent by the client (page from which the visitor arrived at the website)as well as user agent sent by the client (information on the type and version of the browser and the operating system of the end device used for the visit).

The collection, processing and use of the data is based on the legitimate interests of optimizing website operation and data and information security (Art. 6 para. 1 p. 1 lit. f GDPR).

Disclosure of personal data to third parties

Data will only be disclosed to third parties if:

  • the data subjects have given their express consent to this pursuant to Art. 6 (1) p. 1 lit. a GDPR;
  • this is necessary for the fulfillment of a contract with the data subjects according to Art. 6 para. 1 p. 1 lit. b GDPR or
  • in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 p. 1 lit. c GDPR.

There is no transfer of personal data to a third country that is insecure in terms of data protection (according to the assessment of the European Union) or to an international organization.

Data subject rights

Data subjects have the right:

  • in accordance with Art. 7 (3) GDPR to revoke their consent once given to me at any time. This has the consequence that I may no longer continue the data processing based on this consent for the future;
  • in accordance with Art. 15 GDPR to request information about their personal data processed by me. In particular, they may request information about the processing purposes, the category of personal data, the categories of recipients to whom their data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of their data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
  • in accordance with Art. 16 GDPR to immediately demand the correction of incorrect or completion of their personal data stored by me;
  • pursuant to Art. 17 GDPR to request the deletion of their personal data stored by me, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
  • in accordance with Art. 18 GDPR to request the restriction of the processing of their personal data, insofar as the accuracy of the data is disputed by them, the processing is unlawful, but they object to its erasure and I no longer need the data, but they need it for the assertion, exercise or defense of legal claims or they have objected to the processing in accordance with Art. 21 GDPR;
  • in accordance with Art. 20 GDPR, to receive their personal data that they have provided to us in a structured, common and machine-readable format or to request the transfer to another controller, and
  • to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, data subjects can contact the supervisory authority of their usual place of residence or workplace or my office in Berlin for this purpose.

Amendment of this privacy policy

Due to the further development of the website or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy.