Privacy Policy

In operating the website crwittig.de (the "Website"), I process data relating to natural persons, or data from which natural persons can be identified (personal data). With this Privacy Policy, I wish to inform visitors what data this involves, how it is processed, and what rights visitors have as data subjects.

This Privacy Policy fulfils the information obligations under Art. 13 of the General Data Protection Regulation (GDPR). It is based on the definitions set out in Art. 4 GDPR.

Controller

The Controller responsible for the processing is myself, Attorney at Law C. Rocco Wittig, as operator of the Website. No Data Protection Officer has been appointed. Data subjects may contact me and my team directly with any questions about data protection in connection with the operation of the Website, and to exercise their data subject rights. The e-mail address datenschutz@crwittig.de is available for this purpose.

Processing Activities, Purposes and Legal Bases

Neither I nor the processor I have engaged to operate the Website (Strato AG) is able to draw any direct conclusions as to the identity of visitors.

Establishing the connection, page loading and display of the Website

Establishing the connection and loading the page requires retrieving the IP address of the device used by the visitor, as well as information about the browser used on that device. In addition, session cookies are used. Session cookies temporarily store the browsing session and are deleted when the browser is closed. This data is collected, processed and used for the technical and administrative purposes of establishing and maintaining a stable connection, and of displaying the page optimally for the respective device.

This data is collected, processed and used for the performance of a contract to which the data subject is party, or because it is necessary for the implementation of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR).

Statistics and information/data security

In addition, log data on visits to the Website, such as access to image or HTML files, is collected. This data is compiled in a log file. On the basis of this log data, visits to the Website are recorded statistically and may be evaluated by me as needed. Besides statistical analysis, this processing also serves to optimise the operation of the Website and to ensure its confidentiality, availability and integrity, in particular to detect and defend against attacks.

The following categories of log data are collected, processed and used in connection with the domain crwittig.de: client IP address, request line (path of the target address without the domain), status code (e.g. 404 – "the requested page does not exist at the specified URL"), size of the response body (size of the temporarily downloaded files), referrer sent by the client (the page from which the visitor arrived at the Website), and user agent sent by the client (details of the type and version of the browser and the operating system of the device used for the visit).

This data is collected, processed and used on the basis of the legitimate interests of optimising the operation of the Website and ensuring data and information security (Art. 6(1)(f) GDPR).

Disclosure of Personal Data to Third Parties

Data is disclosed to third parties only if:

• the data subjects have given their express consent to this pursuant to Art. 6(1)(a) GDPR;
• this is necessary for the performance of a contract with the data subjects pursuant to Art. 6(1)(b) GDPR; or
• there is a legal obligation for the disclosure pursuant to Art. 6(1)(c) GDPR.

Personal data is not transferred to a third country that is considered unsafe from a data protection perspective (as assessed by the European Union), nor to an international organisation.

Data Subject Rights

Data subjects have the right:

• pursuant to Art. 7(3) GDPR, to withdraw at any time any consent they have given, by notifying me. This means that I may no longer continue, for the future, any processing based on that consent;
• pursuant to Art. 15 GDPR, to request information on the personal data concerning them that I process. In particular, they may request information on the purposes of processing, the category of personal data, the categories of recipients to whom their data has been or will be disclosed, the envisaged retention period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of their data where it was not collected from them, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the details thereof;
• pursuant to Art. 16 GDPR, to request the immediate rectification of inaccurate personal data, or the completion of personal data, stored by me;
• pursuant to Art. 17 GDPR, to request the erasure of personal data stored by me, unless the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
• pursuant to Art. 18 GDPR, to request the restriction of the processing of their personal data where the accuracy of the data is contested by them, where the processing is unlawful but they oppose its erasure, where I no longer need the data but they need it for the establishment, exercise or defence of legal claims, or where they have objected to the processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR, to receive the personal data they have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller; and
• pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, data subjects may contact the supervisory authority of their habitual residence, their place of work, or the location of my office in Berlin.

Amendment of this Privacy Policy

Further development of the Website, or changes to statutory or regulatory requirements, may make it necessary to amend this Privacy Policy.