At Hyphe, we take the protection of your personal data seriously. Personal data is only collected, processed or used if the data subject has consented, if it is necessary for the fulfilment of a contract or if a law permits or prescribes the collection, processing or use. With this data protection declaration, we would like to inform you about details of data collection and data processing as well as about the rights to which you are entitled in this context.
Name and address of the responsible person
The responsible party within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other data protection provisions is:
Hyphe
Rupprecht & Heidenreich GbR
Landwehrstraße 31
80336 München
E-Mail: info@hyphe.eco
Basic information on the processing of personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
As a matter of principle we only processes personal data if the user gives his or her consent to do so or if the data processing is permitted by legal regulations. The legal basis is Article 6 (1) of the EU General Data Protection Regulation (DSGVO). According to this regulation, processing of personal data is only permitted if the data subject consents (Art. 6 para.1 lit. a DSGVO) or the processing is necessary for one of the following purposes:
- To fulfil a contract with the data subject or to carry out pre-contractual measures at the request of the data subject (Art. 6 para.1 lit. b DSGVO).
- To fulfil a legal obligation of our company (Art. 6 para.1 lit. c DSGVO).To protect vital interests of the data subject or another natural person (Art. 6 para.1 lit. d DSGVO).
- To perform a task which is in the public interest or which has been assigned to our company by the public administration (Art. 6 para.1 lit. e DSGVO).
- To protect a legitimate interest of our company or a third party, unless the interests, fundamental rights and freedoms of the data subject for the protection of personal data prevail (Art. 6 para.1 lit. f DSGVO).
Storage period and data deletion
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the legislator. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract. Prescribed storage periods in this sense are, for example, retention periods under tax law or commercial law.
Collection of access data (creation of log files)
This website automatically collects general data and information from the computer system of the calling computer with each call, which is stored in the log files of the server. The following data and information is collected:
- Browser type including version used
- Operating system used by the calling computer
- Date and time of the call
- IP address of the userInternet service provider of the user
- Website from which our website is accessed
- Web pages and sub-websites that are called up from our Internet site
- Other similar data and information that serve to avert danger in the event of attacks on our system.
The data is stored anonymously in the log files of our system. No link is made with other personal data of the user, we do not draw any conclusions about the data subject.
The legal basis for the data processing is Art. 6 para.1 lit. f DSGVO. The storage is necessary to ensure the functionality of our website and the correct display of the content. Furthermore, the data serve our statistics and the continuous optimization of our content. Finally, storage takes place in order to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.
There is no disclosure of data to third parties, unless there is a legal obligation to disclose or it is otherwise provided in this declaration.Since the collection and storage of data in the log files is absolutely necessary for the trouble-free operation of the website, the user has no possibility to object.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Insofar as the collection was carried out for the function-free provision of the Internet site, this is the case with the end of the Internet session.
Cookies
We use cookies on our website. Cookies are text files that are placed on your computer by our server and thus store certain data. Cookies usually contain a characteristic character string, which enables a unique assignment of the Internet browser when the user calls up the Internet site again. This allows the calling browser to be recognized and identified.
Cookies help us to make it easier for you to use the website. Through the recognition of the browser and the storage of previously entered data, the offers and contents of our website can be individually optimized in that data entered by you (e.g. access data, search terms) do not have to be entered again each time you visit the website. The legal basis for this is Art. 6 para.1 lit. f DSGVO.
In addition, we use cookies on our website that enable an analysis of the user’s surfing behavior. However, the data collected in this way is pseudonymized, i.e. the personal data is replaced by other identifiers (pseudonyms) so that it is no longer possible to identify the data subject without consulting additional information. Since your consent is obtained for this purpose when you call up the website, the legal basis for the processing of personal data by means of analysis cookies is Art. 6 para.1 lit. a DSGVO.
Since cookies are stored on the user’s computer, you as the user also have full control over the use of cookies. By changing the settings in your Internet browser can. You can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted by you at any time. If cookies are deactivated for our website, however, it may no longer be possible to use all functions of the website in full.
Contact form
If you contact us by e-mail or contact form, the information you provide will be stored for the purpose of processing the request and for possible follow-up questions.
Analytics and Marketing Tools
a. Google Analytics and Google Tag Manager (Incl. Anonymization)
On this website, Google Analytics has been integrated. Google Analytics is a web analysis service. Web analysis is the collection, compilation and evaluation of data about the behavior of visitors to websites. Among other things, a web analysis service collects data about the website from which a data subject has accessed a website (so-called referrers), which sub-pages of the website have been accessed or how often and for how long a sub-page has been viewed. A web analysis is mainly used for the optimization of a website and for the cost-benefit analysis of internet advertising.
The operating company of the Google Analytics component, as well as the Google Tag Manager, is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USAD.
The controller uses the addition “_gat._anonymizeIp” for web analysis via Google Analytics using the Google Tag Manager. By means of this addition, the IP address of the Internet connection of the data subject is shortened and anonymized by Google if access to our Internet pages takes place from a member state of the European Union or from another state party to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our website, and to provide other services associated with our website.
Google Analytics sets a cookie on the information technology system of the data subject. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyze the use of our website. By each call of one of the individual pages of this website, which is operated by the controller and on which a Google Analytics component has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to track the origin of visitors and clicks and subsequently enable commission calculations.
By means of the cookie, personal information, for example the access time, the place from which an access originated and the frequency of visits to our website by the data subject, is stored. Each time the data subject visits our website, this personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical procedure to third parties.
You can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs.
Furthermore, the data subject has the possibility to object to the collection of data generated by Google Analytics and related to a use of this website as well as to the processing of this data by Google and to prevent such a processing. To do this, you must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout. This browser add-on tells Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as an objection. If the information technology system of the data subject is deleted, formatted or reinstalled at a later point in time, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. Provided that the browser add-on is uninstalled or deactivated by the data subject or another person attributable to his or her sphere of control, there is the option of reinstalling or reactivating the browser add-on.
Further information and the applicable Google privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/.
b. Google AdWords
Our website uses Google conversion tracking. If you have reached our website via an ad placed by Google, Google AdWords will set a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked across AdWords customers’ websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, you will not receive any information that personally identifies users.
Use of social plug-ins
On our website, we have integrated plug-ins from social networks. If the data subject is registered with the respective social network when calling up our website and is also logged in, the social network recognizes which specific sub-page of our website the data subject is calling up. This information is collected by the operator of the social network and assigned to the data subject’s account there. We have no influence on the type and scope of the data that is collected, stored and processed by the operator of the social network. For more detailed information, please therefore contact the operator of the respective social network.To prevent data about you from being processed by the operator of the respective social network, you must log out of the relevant network before accessing our website. In addition, you can use special tools that block the data transmission (e.g. Facebook blocker).
We have integrated the social media plug-ins of the following companies on our website:
Facebook Inc. : https://de-de.facebook.com/about/privacy/
Instagram : https://de-de.facebook.com/help/instagram/155833707900388
LinkedIn Inc. : https://www.linkedin.com/legal/privacy-policy
Twitter : https://twitter.com/en/privacy
Third-party content and services on the use and application of YouTube
Our website also contains content and services from third-party providers, e.g. videos from YouTube or map material from Google Maps. When calling up this content/service via our website, your IP address is usually transmitted to the respective third-party provider. This enables these third-party providers to process your user IP address. Even though we make every effort to only include third-party providers that use IP addresses solely for the purpose of delivering content, we have no influence on how the third-party provider concerned uses the data received. For more detailed information, please therefore contact the respective third-party provider.
Your rights as a data subject
If personal data is processed by you, you are a data subject within the meaning of the GDPR and you are entitled to the following rights against us as the controller:
a) Right to confirmation and information
You can request confirmation from us at any time as to whether personal data concerning you is being processed by us. If this is the case, you have a right to information to be informed by us about the following circumstances:
- the categories of personal data which are processed;
- the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
- the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage period;
- the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
- the existence of a right of appeal to a supervisory authority;
- any available information about the origin of the data, if the personal Data is not collected from the data subject;
- the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
In addition, you have a right to information as to whether personal data is transferred to a state that is not a member of the EU (so-called third country) or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 DSGVO in connection with the transfer of personal data.
b) Right to rectification
You have the right to request that we correct any inaccurate personal data concerning you without delay. Furthermore, you have the right to request us to complete incomplete personal data – also by means of a supplementary declaration – taking into account the purposes of the processing.
c) Right to erasure (right to be forgotten)
You may request us to erase the personal data concerning you without undue delay if one of the following reasons applies:
- The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
- You withdraw your consent on which the processing was based pursuant to Art. 6 (1) a or Art. 9 (2) a DSGVO and there is no other legal basis for the processing.
- You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.
- The personal data concerning you has been processed unlawfully.
- The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
- The personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.
- If the personal data concerning you has been made public by us and we are obliged to erase the personal data pursuant to the principles set out above, we shall also have the duty to inform other data controllers that you, as the data subject, have requested the erasure of all links to or copies or replications of the personal data.In this regard, we shall take appropriate measures, including technical measures, taking into account the available technology and the costs of implementation, in order to comply with this obligation, in any case to the extent that the processing is no longer necessary, i.e. if required by law, or if such deletion is contrary to legitimate interests.
d) Right to restriction of processing
You may request that we restrict the processing of personal data relating to you under the following conditions:
- You dispute the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data.
- The processing is unlawful and you request the restriction of the use of the personal data instead of erasure.
- The personal data is no longer needed by us for the purposes of processing, but you need this data to assert, exercise or defend legal claims.
- You have objected to the processing pursuant to Article 21 (1) of the German Data Protection Act (DSGVO) and it is not yet clear whether the legitimate grounds of us override your interests.
- If the processing of personal data concerning you has been restricted, this data may – apart from being stored – only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State. In this case, you will also be informed by us before the restriction is lifted.
e) Right to information
If you have asserted the right to rectification, erasure or restriction of processing, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. In this respect, you may request us to inform you about these recipients.
f) Right to data portability (“Data portability”)
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6(1)(a) DSGVO or Art. 9(2)(a) DSGVO or on a contract pursuant to Art. 6(1)(b) DSGVO and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you may request that the personal data be transferred directly from one controller to another controller, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.
g) Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing by us of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO. This also applies to profiling based on these provisions.
The organisation shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defence of legal claims.
If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to processing of personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.
h) Right to withdraw consent under data protection law
If you have given your consent under data protection law, you have the right to revoke this consent at any time with effect for the future.
i) Automated decisions in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects vis-à-vis her or similarly significantly affects her, unless the decision
- is not necessary for the conclusion or performance of a contract between you and us
or
- is permissible on the basis of legal provisions of the Union or the Member States to which the controller is subject, and these legal provisions contain appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject
or
-is carried out with the express consent of the data subject.
However, these decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests. If the decision is necessary for entering into, or the performance of, a contract between the data subject and the controller, or if it is made with the data subject’s explicit consent, Hyphe shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, which include at least the right to obtain the data subject’s involvement on the part of the controller, to express his or her point of view and contest the decision.
j) Right to lodge a complaint with the supervisory authority
Notwithstanding the rights you have against us, you also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of personal data concerning you violates the GDPR.
The supervisory authority to which the complaint has been lodged will inform you of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
