Data protection
The person responsible within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Grab Perfect GmbH
Eichenweg 9
35687 Dillenburg
Your data subject rights
You can exercise the following rights at any time using the contact details provided by our data protection officer:
- Information about your data stored by us and its processing (Article 15 GDPR),
- Correction of incorrect personal data (Article 16 GDPR),
- Deletion of your data stored by us (Article 17 GDPR),
- Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
- Objection to the processing of your data by us (Art. 21 GDPR) and
- Data portability, provided you have consented to data processing or have concluded a contract with us (Article 20 GDPR).
If you have given us your consent, you can revoke it at any time with future effect.
You can contact a supervisory authority at any time with a complaint, e.g. B. to the responsible supervisory authority in the federal state of your place of residence or to the authority responsible for us.
A list of the supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschrift_links-node.html .
Collection of general information when you visit our website
Type and purpose of processing:
When you access our website, that is, if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and similar.
They are processed in particular for the following purposes:
- Ensuring problem-free connection to the website,
- Ensuring smooth use of our website,
- Evaluation of system security and stability as well
- for further administrative purposes.
We do not use your data to draw conclusions about you personally. We may evaluate this type of information statistically in order to optimize our website and the technology behind it.
To improve interaction with our visitors, we use a Java script plugin from uptain GmbH (“uptain plugin” https://www.uptain.de ). This allows us to analyze your use of the website and improve customer communication (e.g. through a dialog window). For this purpose, we collect information about your usage behavior, i.e. movement of the cursor, length of stay, links clicked and any information provided. The legal basis for processing is our legitimate interest in direct marketing and the provision of our website (Art. 6 Para. 1 lit f GDPR). As a processor, uptain GmbH is strictly bound to our instructions. The information collected will not be passed on to third parties unless we are legally obliged to do so. If the information collected by the uptain plugin contains personal data, it will be deleted immediately after you visit our website.
Legal basis:
Processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on our legitimate interest in improving the stability and functionality of our website.
Recipient:
Recipients of the data may be technical service providers who act as contract processors for the operation and maintenance of our website.
Storage period:
The data will be deleted as soon as it is no longer required for the purpose of collection. This is generally the case for the data used to provide the website when the respective session has ended.
Provision mandatory or required:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may be unavailable or restricted. For this reason, an objection is excluded.
Registration on our website
Type and purpose of processing:
When registering to use our personalized services, some personal data is collected, such as name, address, contact and communication data (e.g. telephone number and email address). If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option to change or delete the data provided during registration at any time if necessary. Of course, we will also provide you with information about the personal data we have stored about you at any time.
Legal basis:
The data entered during registration is processed based on the user’s consent (Art. 6 Para. 1 lit. a GDPR).
If the registration serves to fulfill a contract to which the data subject is a party or to carry out pre-contractual measures, the additional legal basis for the processing of the data is Article 6 (1) (b) GDPR.
Recipient:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage period:
Data will only be processed in this context as long as the relevant consent is given. They will then be deleted unless there are legal retention requirements. To contact us in this context, please use the contact details provided at the end of this data protection declaration.
Provision mandatory or required:
The provision of your personal data is voluntary, solely based on your consent. Without providing your personal data, we cannot grant you access to the content and services we offer.
Provision of paid services
Type and purpose of processing:
In order to provide paid services, we request additional data, such as payment details, in order to be able to carry out your order.
Legal basis:
The processing of the data required to conclude the contract is based on Article 6 Paragraph 1 Letter b GDPR.
Recipient:
Recipients of the data may be processors.
Storage period:
We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax requirements.
Provision mandatory or required:
The provision of your personal data is voluntary. Without providing your personal data, we cannot grant you access to the content and services we offer.
Comment function
Type and purpose of processing:
When users leave comments on our website, the time at which they were created and the user name previously chosen by the website visitor are stored in addition to this information. This is for our security, as we can be prosecuted for illegal content on our website, even if it was created by users.
Legal basis:
The data entered as a comment is processed on the basis of a legitimate interest (Art. 6 Para. 1 lit. f GDPR).
By providing the comment function, we would like to enable you to interact easily. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.
Recipient:
Recipients of the data may be processors.
Storage period:
The data will be deleted as soon as it is no longer required for the purpose of collection. This is generally the case when communication with the user has been completed and the company can see from the circumstances that the matter in question has been finally clarified.
Provision mandatory or required:
The provision of your personal data is voluntary. Without providing your personal data, we cannot give you access to our comment function.
contact form
Type and purpose of processing:
The data you enter will be stored for the purpose of individual communication with you. This requires you to provide a valid email address and your name. This is used to assign the request and then answer it. Providing further data is optional.
Legal basis:
The data entered into the contact form is processed on the basis of a legitimate interest (Art. 6 Para. 1 lit. f GDPR).
By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.
If you contact us to request an offer, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 Para. 1 lit. b GDPR).
Recipient:
Recipients of the data may be processors.
Storage period:
Data will be deleted no later than 6 months after the request has been processed.
If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and will delete your data after these periods have expired.
Provision mandatory or required:
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, email address and the reason for the request.
SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
Changes to our privacy policy
We reserve the right to adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, for example when introducing new services. The new data protection declaration will then apply to your next visit.
