With these privacy notices, we inform you about our handling of your personal data and about your rights under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The data controller is rageknuff UG (hereinafter referred to as "we" or "us").
General Information
If you have questions or suggestions regarding this information or wish to contact us to assert your rights, please direct your request to:
rageknuff UG
Ansbacher Str. 4
91578 Leutershausen
Legal Basis
The data protection term "personal data" refers to all information relating to an identified or identifiable natural person. Data processing by us only takes place on the basis of a legal permission. We process personal data only with your consent (§ 25 para. 1 TTDSG or Art. 6 para. 1 lit. a GDPR), for the performance of a contract to which you are a party or for the implementation of pre-contractual measures at your request (Art. 6 para. 1 lit. b GDPR), for compliance with a legal obligation (Art. 6 para. 1 lit. c GDPR) or if the processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and fundamental freedoms requiring the protection of personal data override (Art. 6 para. 1 lit. f GDPR).
Storage Duration
Unless the following information indicates otherwise, we only store the data for as long as is necessary to achieve the processing purpose or to fulfill our contractual or legal obligations. Such legal retention obligations may arise in particular from commercial or tax regulations.
Recipients of the Data
We use data processors within the scope of processing your data. Processing operations carried out by such data processors include, for example, hosting, email delivery, maintenance and support of IT systems, customer and order management, order processing, accounting and billing. A data processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the data controller. Data processors do not use the data for their own purposes, but carry out the data processing exclusively for the controller and are contractually obligated to ensure appropriate technical and organizational measures for data protection.
Data Transfer to Third Countries
Our data processing may involve the transfer of certain personal data to third countries, i.e., countries where the GDPR is not applicable law. Such a transfer is carried out in a permissible manner if the European Commission has determined that an adequate level of data protection is provided in such a third country. If such an adequacy decision of the European Commission is not available, a transfer of personal data to a third country only takes place if appropriate guarantees exist in accordance with Art. 46 GDPR or if one of the conditions of Art. 49 GDPR is met.
Processing When Exercising Your Rights
When you exercise your rights under Articles 15 to 22 GDPR, we process the transmitted personal data for the purpose of implementing these rights by us and to be able to provide evidence thereof. Data stored for the purpose of providing information and preparing it will be processed by us only for this purpose and for data protection control purposes and will otherwise restrict the processing in accordance with Art. 18 GDPR. These processings are based on the legal basis of Art. 6 para. 1 lit. c GDPR in conjunction with Articles 15 to 22 GDPR and § 34 para. 2 BDSG.
Your Rights
As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights: You have the right, in accordance with Art. 15 GDPR and § 34 BDSG, to request information about whether and to what extent we process personal data about you. You have the right, in accordance with Art. 16 GDPR, to request the correction of your data from us. You have the right, in accordance with Art. 17 GDPR and § 35 BDSG, to request the deletion of your personal data from us. You have the right, in accordance with Art. 18 GDPR, to restrict the processing of your personal data. You have the right, in accordance with Art. 20 GDPR, to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller. If you have given us separate consent to data processing, you can revoke this consent at any time in accordance with Art. 7 para. 3 GDPR. Such a revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. If you believe that the processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.
Right to Object
You have the right, in accordance with Art. 21 para. 1 GDPR, to object to processing based on the legal basis of Art. 6 para. 1 lit. e or f GDPR, for reasons arising from your particular situation. If we process personal data about you for direct marketing purposes, you may object to such processing in accordance with Art. 21 para. 2 and para. 3 GDPR.
Data Processing on Our Website
When using the website, certain information about your use of the website is automatically collected by us during your visit. Under data protection law, the IP address is generally considered personal data. An IP address is assigned to every device connected to the internet by the internet service provider so that it can send and receive data.
Processing of Server Log Files
When using our website purely for informational purposes, general information that your browser transmits to our server is first stored automatically (i.e., without registration). This includes by default: browser type/version, operating system used, page accessed, previously visited page (referrer), IP address, date and time of server request and HTTP status code. The processing is carried out to safeguard our legitimate interests and is based on the legal basis of Art. 6 para. 1 lit. f GDPR. This processing serves the technical administration and security of the website. The stored data is deleted after seven days, unless there is a justified suspicion of unlawful use based on concrete indications and further examination and processing of the information is necessary for this reason. We are unable to identify you as a data subject based on the stored information. Articles 15 to 22 GDPR therefore do not apply in accordance with Art. 11 para. 2 GDPR, unless you provide additional information that enables your identification to exercise your rights laid down in these articles.