A. Information about the processing of personal data

1. Scope of the processing of personal data

We generally only process the personal data of our users to the extent that this is necessary to provide a functional website and our content and services. The processing of our users’ personal data is generally only carried out with the consent of the user. An exception applies in cases where prior consent cannot be obtained for actual reasons and the processing of the data is permitted by law.

2. Legal basis for the processing of personal data

If we obtain the consent of the data subject for processing personal data, Art. 6 (1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

For the processing of personal data that is necessary to fulfill a contract to which the data subject is a party, Art. 6 (1)(b) of the GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

If the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.

If the vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.

3. Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need to further store the data for the conclusion or fulfillment of a contract.

B. Provision of the website and creation of log files

1. Description and scope of data processing

Every time you visit our website www.winteam500.de, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

• Information about the browser type and version used

• The user’s operating system

• The user’s Internet service provider

• The user’s IP address

• Date and time of access

• Websites from which the user’s system accesses our website

• Websites accessed by the user’s system via our website

This information is not stored together with other personal data of the user.

2. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer (smooth connection setup). For this purpose, the user’s IP address must be stored for the duration of the session. Storage in log files takes place to ensure the functionality of the website (comfortable use). In addition, the data is used to optimize (stability) the website and to ensure the security of our information technology systems. The data will not be evaluated for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR.

3. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected to draw conclusions about you personally.

In addition, we use cookies and analysis services when you visit our website. You can find more detailed explanations under letters G and K of this data protection declaration.

4. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collection to provide the website, this is the case when the respective session has ended, but no later than after 14 days.

5. Possibility of objection and removal

The collection of data to provide the website and the storage of data in log files is essential for the operation of the website. The user therefore has no possibility of objection.

C. Transfer of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:

• you have given your express consent to do so in accordance with Art. 6 Para. 1 Clause 1 lit. a GDPR,

• in the event that the transfer is necessary in accordance with Art. 6 Para. 1 Clause 1 lit. c GDPR, and

• this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 Para. 1 Clause 1 Letter b GDPR,

• the transfer is necessary in accordance with Art. 6 Para. 1 Clause 1 Letter f GDPR to protect our legitimate interests or to protect the legitimate interests of third parties and there is no reason to assume that you have an overriding legitimate interest in not sharing your data.

D. Contact form and email contact

1. Description and scope of data processing

A contact and appointment form has been created on our website for the respective location, which can be used for electronic contact and appointment scheduling. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. This data is:

Contact form: Personal data,

• Salutation

• Name

• Telephone number

• Email

• Message [optional field]

Appointment: Personal data,

• Salutation

• Name

• Telephone number

• Email

• Message [optional field]

When the message is sent, the following data is also saved:

• The user’s IP address

• Date and time of registration

Your consent to the processing of the data is obtained during the sending process and reference is made to this privacy policy. Alternatively, you can contact us using the email address provided. In this case, the user’s personal data transmitted with the email will be saved. Please note that the extent of the personal data collected in the contact form also depends on which data you yourself disclose in the contact form, particularly in the “Your message” field and by attaching your documents to an email.

The data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation.

2. Legal basis for data processing

The legal basis for processing the data for sending the newsletter and the associated success measurement is based on the user’s consent (Art. 6 Para. 1 lit. a, Art. 7 GDPR in conjunction with Section 7 Para. 2 No. 3 UWG) or on the basis of the legal permission pursuant to Section 7 Para. 3 UWG.

The legal basis for processing the data transmitted when sending an email is Art. 6 Para. 1 lit. f GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR.

3. Purpose of data processing

The processing of the personal data from the input mask serves us solely to process the contact. In the case of contact by email, this also represents the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of 14 days at the latest.

5. Possibility of objection and removal

The user has the option of revoking his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. All personal data that was stored during the contact will be deleted in this case.

E. Use of cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware. Information that is related to the specific device used is stored in the cookie. However, this does not mean that we immediately know your identity.

The use of cookies serves on the one hand to make using our services more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted when you leave our site. On the other hand, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a specific period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again. On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These cookies enable us to automatically recognize that you have already visited us when you visit our site again. These cookies are automatically deleted after a defined period of time.

The data processed by cookies are required for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

The user data collected in this way is pseudonymized by technical precautions. It is therefore no longer possible to assign the data to the user who accessed it. The data is not stored together with other personal data of the users.

When you visit our website, an information banner informs users about the use of cookies for analysis purposes and refers them to this privacy statement. In this context, there is also a note on how the storage of cookies can be prevented in the browser settings. The transmission of Flash cookies cannot be prevented via the browser settings, but can be prevented by changing the Flash Player settings.

Deactivating cookies in common browsers:

• » Chrome

• » Firefox

• » Safari

• » Internet Explorer 8–11

F. Information about Google services

We use various services from Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website. You can find more information about the individual specific Google services that we use on this website in the additional privacy statement. By integrating Google services, Google may collect information (including personal data) and process it. It cannot be ruled out that Google will also transmit the information to a server in a third country.

As can be seen from Google’s Privacy Shield certification (found at » https://www.privacyshield.gov/list under the search term “Google”), Google has committed to complying with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework regarding the collection, use and storage of personal data from the member states of the EU and Switzerland respectively. Google, including Google LLC and its wholly owned subsidiaries in the USA, has declared through certification that it adheres to the Privacy Shield principles. You can find more information at » https://www.google.de/policies/privacy/frameworks/.

Google states the following, among other things: “We may link personal data from one service with information and personal data from other Google services. This makes it easier for you, for example, to share content with friends and acquaintances. Depending on your account settings, your activities on other websites and in apps may be linked to your personal data in order to improve Google services and the advertising displayed by Google.” (» https://www.google.com/intl/de/policies/privacy/index.html)

You can prevent this data from being added directly by logging out of your Google account or by making the appropriate account settings in your Google account. You can also change your cookie settings (e.g. delete cookies, block cookies, etc.). You can find more information on this under “G. Use of cookies”.

You can find more information in Google’s privacy policy, which you can access here: » https://www.google.com/policies/privacy/.

Information on Google’s privacy settings can be found at » https://privacy.google.com/take-control.html.

I. Google Web Fonts

This site uses so-called web fonts to display the font. These are provided by Google (» https://www.google.com/webfonts/).

2. Google Maps

This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You can find more information about how user data is handled in Google’s privacy policy: » www.google.de/intl/de/policies/privacy/.

3. Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Use includes the “Universal Analytics” operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze a user’s activities across devices.

Google Analytics uses cookies that enable an analysis of the use of our website by visitors (you can find out more about cookies in the previous section “Use of cookies”). The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before transmission. In exceptional cases, however, Google may also transmit the full IP address to a server in the USA and shorten it there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. On our behalf (as the operator of this website), Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website activity and internet usage. This also justifies our legitimate interest in data processing. The legal basis for the use of Google Analytics is Section 15 Paragraph 3 TMG or Art. 6 Paragraph 1 Letter f GDPR.

4. Data retention

periods/Automated data deletion
The data we send and which is linked to cookies, user IDs (e.g. user ID) or advertising IDs is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. You can find more information on terms of use and data protection at » https://www.google.com/analytics/terms/de.html or alternatively at » https://policies.google.com/?hl=de.

5. Deactivation of Google Analytics

Option 1: You can prevent cookies from being saved by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

Option 2: You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing a so-called browser add-on from the following link: » https://tools.google.com/dlpage/gaoptout?hl=de.

Option 3: Opt-out cookies prevent your data from being collected in the future when you visit this website. To prevent Universal Analytics from collecting data across different devices, you must opt ​​out on all systems used. If you click here, the opt-out cookie will be set: Set opt-out cookie

G. Rights of the data subject

You have the right:

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;

• to request the immediate rectification of incorrect or completion of your personal data stored by us in accordance with Art. 16 GDPR;

• pursuant to Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

• pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data, if you dispute the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;

• pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another responsible party;

• pursuant to Art. 7 Para. 3 GDPR, to revoke your consent to us at any time. This means that we may no longer continue the data processing based on this consent in the future and

• to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or the registered office of our partnership company.

H. Right of objection

You have the right to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) (e) or (f) GDPR, for reasons related to your particular situation; this also applies to profiling based on these provisions. The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If the personal data concerning you is processed in order to conduct direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct advertising. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. In connection with the use of information society services, you have the option of exercising your right of objection by means of automated procedures that use technical specifications, regardless of Directive 2002/58/EC.

I. Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. If you would like to exercise your right of revocation or objection, simply send us an email.