DATA PROTECTION
The operators of this website and its pages take the protection of your personal data very seriously. Accordingly, we treat your personal data confidentially and in accordance with the applicable statutory data protection regulations and this Privacy Notice.

Whenever you use this website, various types of personal data are collected. Personal data means any data with which you can be personally identified. This Privacy Notice explains which data we collect and for what purposes we use such data. It also explains how and for what purpose the information is collected.

Please note that data transmission over the Internet (e.g. communication by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

INFORMATION ABOUT THE CONTROLLER (REFERRED TO AS THE “CONTROLLER” UNDER THE GDPR)
The controller responsible for data processing on this website is:

Moritz Allmendinger
Virngrundstraße 4
73479 Ellwangen (Jagst)
Germany

Phone: +49 172 7568975
Email: info@moritzallmendinger.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g. names, email addresses, etc.).

STORAGE PERIOD
Unless a more specific storage period is stated in this Privacy Notice, your personal data will remain with us until the purpose for which it was collected no longer applies. If you submit a justified request for erasure or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for retaining your personal data (e.g. retention periods required under tax or commercial law); in the latter case, deletion will take place once those grounds no longer apply.

GENERAL INFORMATION ON THE LEGAL BASIS FOR DATA PROCESSING ON THIS WEBSITE
If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR if special categories of personal data within the meaning of Article 9(1) GDPR are processed. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Article 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your terminal device (e.g. via device fingerprinting), data processing is additionally carried out on the basis of Section 25(1) TTDSG. Consent may be withdrawn at any time.

Where your data is required for the performance of a contract or for carrying out pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. Where your data is required to fulfil a legal obligation, we process it on the basis of Article 6(1)(c) GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. Information regarding the relevant legal basis in each individual case is provided in the following sections of this Privacy Notice.

INFORMATION ON DATA TRANSFERS TO THE USA AND OTHER NON-EU COUNTRIES
Among other things, we use tools provided by companies located in the United States or other non-EU countries that may not provide an adequate level of data protection. Where such tools are active, your personal data may be transferred to and processed in these non-EU countries.

Please note that these countries may not guarantee a level of data protection comparable to that of the European Union. For example, US companies may be required to disclose personal data to security authorities without data subjects being able to seek judicial remedies. Therefore, it cannot be ruled out that US authorities (e.g. intelligence or security agencies) may process, analyse, and permanently store your personal data for monitoring purposes. We have no control over these processing activities.

WITHDRAWAL OF YOUR CONSENT TO DATA PROCESSING
Many data processing operations are only possible with your express consent. You may withdraw consent already granted to us at any time. The legality of the data processing carried out before the withdrawal remains unaffected.

RIGHT TO OBJECT TO DATA COLLECTION IN SPECIAL CASES; RIGHT TO OBJECT TO DIRECT MARKETING (ARTICLE 21 GDPR)
WHERE DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. PLEASE REFER TO THIS PRIVACY NOTICE TO DETERMINE THE LEGAL BASIS ON WHICH PROCESSING IS BASED.

IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEREAFTER NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).

RIGHT TO LODGE A COMPLAINT WITH THE COMPETENT SUPERVISORY AUTHORITY
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedy.

RIGHT TO DATA PORTABILITY
You have the right to receive data that we process automatically on the basis of your consent or in fulfilment of a contract in a commonly used, machine-readable format, or to request that it be transferred to a third party. If you request direct transfer to another controller, this will only be carried out where technically feasible.

ACCESS, RECTIFICATION AND ERASURE
Within the framework of applicable legal provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin, recipients, and the purpose of processing. You may also have the right to request rectification or erasure of such data. For this purpose, and for any further questions concerning personal data, you may contact us at any time.

RIGHT TO RESTRICTION OF PROCESSING
You have the right to request restriction of the processing of your personal data. You may contact us at any time for this purpose.

The right to restriction of processing applies in the following cases:

• if you contest the accuracy of your personal data stored by us, we generally require time to verify this; during this verification period, you have the right to request restriction of processing;

• if processing of your personal data is or has been unlawful, you may request restriction of processing instead of erasure;

• if we no longer need your personal data, but you require it for the establishment, exercise, or defence of legal claims, you have the right to request restriction instead of erasure;

• if you have objected pursuant to Article 21(1) GDPR, your rights and our rights must be balanced. Until it is determined whose interests prevail, you have the right to request restriction of processing.

If processing has been restricted, such personal data may — apart from storage — only be processed with your consent, for the establishment, exercise, or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL AND/OR TLS ENCRYPTION
For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the website operator, this website uses SSL and/or TLS encryption. You can recognise an encrypted connection by the browser address line changing from “http://” to “https://” and by the lock symbol in your browser. If SSL or TLS encryption is activated, data transmitted to us cannot be read by third parties.

ENCRYPTED PAYMENT TRANSACTIONS ON THIS WEBSITE
If, after concluding a paid contract, you are required to provide payment data (e.g. account details for direct debit authorisation), such data is required for payment processing. Payment transactions using common payment methods (Visa/Mastercard, direct debit) are processed exclusively via encrypted SSL or TLS connections.