Privacy Policy - relticc GmbH

Overview

In the following sections, you will find a simple summary of how your personal data is processed when you use our website. Personal data is any information that can be used to personally identify you. Detailed information on data protection can be found in the full privacy policy listed below.

Who is responsible for data collection on this website?

The processing of your data on this website is carried out by the website operator. You can find their contact details in the section “Responsible entity for data processing” in this privacy policy.

What do we use your data for?

Some of your data is collected to ensure the smooth operation of the website. Additional data may be used to analyze your user behavior. If contracts are concluded or prepared via the website, we also use the submitted data for contract offers, orders, or other inquiries.

How do we collect your data?

Some of your data is provided directly by you, for example, when you enter information into a contact form. Other data is collected automatically or with your consent by our IT systems when you visit the website. This mainly includes technical information, such as the internet browser you use, your operating system, or the time of your visit. This data is automatically collected as soon as you access our website.

What rights do you have regarding your data?

You have the right at any time to receive free information about the origin, recipients, and purpose of your stored personal data. You may also request the correction or deletion of this data. If you have consented to processing, you can revoke this consent at any time for the future. Under certain circumstances, you may also request the restriction of the processing of your personal data. Additionally, you have the right to lodge a complaint with the competent supervisory authority. For these and other data protection questions, you can contact us at any time.

1. GENERAL INFORMATION

DATA PROTECTION

The protection of your personal data is very important to us. Below we inform you which data is processed when you visit our website and use our online services, and which rights you have under the General Data Protection Regulation (GDPR; Datenschutz-Grundverordnung – DSGVO).

The use of the relticc GmbH website is generally possible without providing any personal data. Personal data means information that can be used to personally identify you. If you use specific services on our website (e.g., contact form, appointment booking), the processing of personal data may become necessary. In these cases, the processing is carried out in compliance with the provisions of the GDPR.

We implement technical and organizational measures appropriate to the risk to ensure a level of data protection suitable for your data. Please note that data transmissions over the Internet may have security vulnerabilities.

RESPONSIBLE ENTITY FOR DATA PROCESSING

The entity responsible within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in the member states of the European Union, and other provisions of data protection law is:

relticc GmbH
Trippstadter Str. 110
67663 Kaiserslautern
Germany
Tel.: +49 631 34376064
E-Mail: info@relticc.com
Website: relticc.com

HOSTING

We host the content of our website with DomainFactory GmbH, c/o WeWork, Neuturmstraße 5, 80331 Munich (hereinafter “DomainFactory”). When you visit our website, DomainFactory collects various log files, including your IP address. For details, please refer to DomainFactory’s privacy policy: https://www.df.eu/de/datenschutz/.

The use of DomainFactory is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the reliable presentation of our website. Where applicable consent has been obtained, processing is carried out solely based on Article 6(1)(a) GDPR and § 25(1) TDDDG, insofar as consent includes the storage of cookies or access to information on the user’s device (e.g., for device fingerprinting) under the TDDDG. Consent can be revoked at any time.

ENCRYPTION

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the website operator, this website uses SSL/TLS encryption. A secure connection can be identified by the change of the browser address from “http://” to “https://” and by the padlock symbol in your browser’s address bar. When SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.

2. DATA COLLECTION

SERVER LOG FILES

Each time a visitor or an automated system accesses the website of relticc GmbH, a range of general data and information is collected. This general data and information is stored in the server log files. The data collected may include (1) the types and versions of browsers used, (2) the operating system of the accessing system, (3) the website from which an accessing system reached our website (so-called referrer), (4) the subpages accessed on our website, (5) the date and time of access to the website, (6) an Internet Protocol (IP) address, (7) the Internet service provider of the accessing system, and (8) other similar data and information used for the prevention of risks in the event of attacks on our IT systems.

These data are not merged with other data sources. The collection of these data is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website; for this purpose, the server log files must be recorded.

Our website uses cookies. Cookies are small text files stored on your device (e.g., computer, tablet, smartphone) via your internet browser when you visit our website. Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie, consisting of a string of characters that allows websites and servers to assign the specific browser in which the cookie is stored. This enables the visited websites and servers to distinguish the individual browser of the data subject from other browsers that contain other cookies.

We use only technically necessary cookies that are required for the operation of the website. These cookies ensure, for example, that pages are displayed correctly, navigation elements function, or form entries are retained during a visit. Technically necessary cookies do not store personal data for the creation of user profiles or for marketing purposes; therefore, consent is not required for their use.

You can prevent the storage of cookies at any time through your browser settings or delete already stored cookies. This is possible in all common internet browsers. Please note that disabling cookies may limit the functionality of our website.

Matomo Analytics

We use the open-source software Matomo for analyzing and statistically evaluating the use of our website. Matomo enables us to collect and analyze data on how visitors use our website. This allows us, for example, to determine when specific page views occurred and from which region they originate. We also collect various log files (e.g., IP address, referrer, browsers and operating systems used) and can measure whether visitors perform specific actions on our website.

The use of this analytics tool is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both the web offer and advertising. If applicable consent has been obtained, processing is carried out solely on the basis of Article 6(1)(a) GDPR and § 25(1) TDDDG, insofar as consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under the TDDDG. Consent can be revoked at any time.

In the analysis with Matomo, we use IP anonymization. The IP address is shortened before analysis, so it can no longer be uniquely assigned to you (IP masking).

We have configured Matomo so that it does not store cookies in your browser.

We host Matomo exclusively on our own servers, so all analytics data remains with us and is not shared with third parties.

3. CONTACT VIA THE WEBSITE

On our website, we provide various ways to contact us. These include the contact details we provide, our contact form, and the option to book appointments. When you contact us through these channels, the personal data you voluntarily provide is automatically stored. This is done solely for the purpose of processing your inquiry or contacting you. Your data will not be shared with third parties unless we are legally obliged to do so.

For contacting us and booking appointments, we use certain technical plugins and services, which we explain in more detail below. These plugins help us process your inquiries efficiently and may also process personal data.

INQUIRIES BY E-MAIL OR TELEPHONE

If you contact us by e-mail or telephone, your inquiry, including any personal data arising from it, will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.

The processing of this data is based on Article 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) if consent has been obtained; consent can be revoked at any time. The data you send us via contact inquiries will remain with us until you request its deletion, revoke your consent to storage, or the purpose of data storage no longer applies (e.g., after your request has been fully processed). Mandatory legal provisions, in particular statutory retention periods, remain unaffected.

INQUIRIES VIA CONTACT FORM

If you submit inquiries via the contact form, the information provided in the form, including the contact details you provide, will be stored for the purpose of processing your inquiry and in case of follow-up questions. This data will not be shared without your consent.

The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose of data storage no longer applies (e.g., after your inquiry has been fully processed). Mandatory legal provisions, in particular retention periods, remain unaffected.

Contact Form 7

We have integrated Contact Form 7 on this website. The provider is RockLobster LLC, Sakai 810-0001 Fukuoka Prefecture, Chuo-ku Tenjin 1-chome 8-1, Fukuoka City Hall, Japan (hereinafter “RockLobster”).

Contact Form 7 allows us to create and manage contact forms on our website. For this purpose, the data you enter in the form, including your name, e-mail address, message content, IP address, device and browser information, and information about your use of our website (e.g., visited pages and clicked elements), is processed and transmitted via e-mail.

The use of Contact Form 7 is based on Article 6(1)(a) GDPR. If consent has been obtained, processing is carried out solely on the basis of your consent. This consent can be revoked at any time without affecting the lawfulness of processing carried out prior to revocation.

For further details on data processing by Contact Form 7, please see: https://contactform7.com/privacy-policy/.

Data transfers to Japan are based on the European Union’s adequacy decision. Details can be found here: https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=OJ:L:2019:076:TOC.

You can prevent the collection and processing of your personal data by Contact Form 7 by blocking third-party cookies or activating your browser’s “Do Not Track” function.

Cloudflare Turnstile

We use Cloudflare Turnstile (hereinafter “Turnstile”) on this website. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Cloudflare”).

Turnstile is used to verify whether data input on this website (e.g., in a contact form) is made by a human or an automated program. To do this, Turnstile analyzes the behavior of the website visitor based on various characteristics.

This analysis begins automatically as soon as the website visitor enters a site with Turnstile enabled. Turnstile evaluates various information (e.g., IP address, time spent on the website, or mouse movements made by the user). The data collected during this analysis is transmitted to Cloudflare.

The storage and analysis of data is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated scanning and spam. If consent has been obtained, processing is carried out solely based on Article 6(1)(a) GDPR and §25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under the TDDDG. Consent can be revoked at any time.

Data processing is based on the standard contractual clauses, which can be found here: https://www.cloudflare.com/cloudflare-customer-scc/.

Further information on Cloudflare Turnstile can be found in the privacy policy here: https://www.cloudflare.com/cloudflare-customer-dpa/.

The company is certified under the “EU-US Data Privacy Framework” (DPF), an agreement between the European Union and the USA ensuring compliance with European data protection standards. All DPF-certified companies are obligated to adhere to these standards. Further information is available here: https://www.dataprivacyframework.gov/participant/5666.

Akismet Anti-Spam

We have integrated Akismet on this website. The provider is Automattic A8C Ireland Ltd., Business Centre, No.1 Lower Mayor Street, International Financial Services Centre, Dublin 1, Ireland (hereinafter “Automattic”), whose parent company is based in the USA.

Akismet allows us to analyze submitted comments for spam characteristics. For this purpose, the provided visitor name, e-mail address, IP address, comment text, browser type, and time of access are processed.

The use of Akismet is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in maintaining uninterrupted, spam-free communication with website visitors. If consent has been obtained, processing is carried out solely on the basis of Article 6(1)(a) GDPR and §25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under the TDDDG. Consent can be revoked at any time.

Further details can be found here: https://akismet.com/gdpr/.

Data transfers to the USA are based on the EU Commission’s standard contractual clauses. Details can be found here: https://wordpress.com/support/data-processing-agreements/.

The company is certified under the “EU-US Data Privacy Framework” (DPF). All DPF-certified companies are obligated to comply with European data protection standards. Further information is available here: https://www.dataprivacyframework.gov/participant/4709.

Cal.com

We have integrated cal.com on this website. The provider is cal.com, Inc., San Francisco, USA (hereinafter “cal.com”).

Cal.com enables us to schedule online appointments via an embedded modal. For this purpose, the personal data you enter in the booking form is processed. The specific data required is indicated in the respective form. The data is transmitted to us, stored, and processed to enable appointment scheduling.

The processing of your personal data is based on Article 6(1)(b) GDPR for the fulfillment of a contract (appointment scheduling).

Further information on data processing by cal.com can be found in cal.com’s privacy policy: https://cal.com/de/privacy.

Your data may be transferred to the USA, a country that under EU law does not guarantee an adequate level of data protection. Further details can be found in cal.com’s terms of service: https://cal.com/de/terms.

The collection of your data serves to create and coordinate an online appointment. Your data will be deleted once it is no longer needed for this purpose. The user’s e-mail address will be stored as long as the service is used.

You can revoke or delete the organization of your appointment at any time by sending a message to the following e-mail address: support@cal.com.

4. PLUGINS

We use various plugins on our website to improve functionality, visibility, and performance.

All in One SEO

We have integrated the All in One SEO plugin on this website. The provider is Semper Plugins LLC., 7732 Maywood Crest Drive, West Palm Beach, FL 33412, USA.

All in One SEO allows us to improve the visibility and performance of our website, optimize SEO settings, and prepare content in a search engine-friendly manner. For this purpose, certain user-specific data is processed, including IP address, page views, visited URLs, time spent on the website, clicks made, and information about the browser and operating system used.

The processing of your personal data is based on Article 6(1)(b) GDPR (for the fulfillment of contractual obligations) and Article 6(1)(f) GDPR (the website operator’s legitimate interest in a functional and high-performing website).

Further information on data processing by All in One SEO can be found in the provider’s privacy policy: https://aioseo.com/privacy-policy/.

Personal data is stored as long as required for the purposes of using the plugin or as required by statutory or contractual retention periods.

WP Super Cache

We have integrated the WP Super Cache plugin on this website. The provider is WordPress, running on our own servers or computers under our own data protection responsibility.

WP Super Cache improves the loading speed of our website by creating and caching static versions of pages. This allows content to load faster on repeated visits, enhancing the user experience. Technical data, such as accessed URLs, may be stored in the cache. The plugin does not independently analyze personal data.

The use of WP Super Cache is based on Article 6(1)(f) GDPR, as we have a legitimate interest in a high-performing website.

Further information about the plugin can be found here: https://wordpress.org/plugins/wp-super-cache/.

5. EXTERNAL LINKS

Our website may contain links to external websites, including, in particular, our company profile on LinkedIn. By clicking such a link, you leave our website. The processing of personal data on the external websites is solely the responsibility of the respective provider. Information about this can be found in the privacy policies of the respective services.

6. DISCLOSURE OF PERSONAL DATA

In the course of our business activities, we cooperate with various external parties. In some cases, this also requires the transfer of personal data to these external parties. We only disclose personal data to external parties if it is necessary for the performance of a contract, if we are legally obliged to do so (e.g., disclosure to tax authorities), if we have a legitimate interest in the disclosure pursuant to Art. 6(1)(f) GDPR, or if another legal basis permits the data transfer. When using processors, we only disclose personal data of our customers on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

7. DURATION OF STORAGE

The duration of the storage of personal data is determined by the applicable statutory retention periods. After the expiry of these periods, the data will be automatically deleted, provided it is no longer required for the performance or preparation of contracts.

Personal data is also only stored as long as necessary to achieve the respective purpose. Once the purpose of storage no longer applies, personal data will be routinely blocked or deleted, unless statutory provisions require further storage.

8. LEGAL BASIS FOR PROCESSING

The processing of personal data in our company only takes place if there is a clear legal basis. Consent of the data subject can form the basis for certain processing operations if they have explicitly agreed to it (Art. 6(1)(a) GDPR).

If the processing is necessary to fulfill a contract to which the data subject is a party, or to carry out pre-contractual measures, such as inquiries regarding our products or services, we rely on Art. 6(1)(b) GDPR.

If there is a legal obligation that requires processing, such as for fulfilling tax or accounting duties, processing is carried out on the basis of Art. 6(1)(c) GDPR.

In very rare situations, processing may also be necessary to protect vital interests, for example if a person is injured in our company and important information such as name, age, or health insurance details must be transmitted to doctors or other responsible authorities. In such cases, Art. 6(1)(d) GDPR applies.

Finally, processing may be based on Art. 6(1)(f) GDPR if no other legal basis applies, but there is a legitimate interest of our company or a third party, and the rights and freedoms of the data subject do not override this interest. This is particularly the case when the data subject has a customer relationship with our company, whereby a careful balancing of interests is always conducted (see Recital 47, second sentence, GDPR).

9. RIGHTS OF DATA SUBJECTS

a) Right to Confirmation

Every data subject has the right granted by the European legislator to obtain confirmation from the controller as to whether personal data concerning them is being processed. If a data subject wishes to exercise this right, they may contact an employee of the controller at any time.

b) Right of Access

Every data subject whose personal data is processed has the right granted by the European legislator to obtain free access at any time to the personal data stored about them and to receive a copy of this information. Furthermore, the data subject is entitled to obtain information about:

the purposes of processing
the categories of personal data being processed
the recipients or categories of recipients to whom the personal data have been or will be disclosed, especially recipients in third countries or international organizations
if possible, the intended duration for which the personal data will be stored, or if not possible, the criteria used to determine this period
the existence of a right to rectification or erasure of personal data concerning them, or to restriction of processing or objection to processing by the controller
the existence of a right to lodge a complaint with a supervisory authority
if the personal data are not collected from the data subject: all available information about the source of the data
the existence of automated decision-making, including profiling according to Art. 22(1) and (4) GDPR, and, at least in these cases, meaningful information about the logic involved as well as the significance and intended consequences of such processing for the data subject

Furthermore, the data subject has the right to know whether personal data has been transferred to a third country or to an international organization, and if so, the right to obtain information about the appropriate safeguards related to the transfer.

To exercise their right of access, the data subject may contact an employee of the controller at any time.

c) Right to Rectification

Every data subject has the right to demand the immediate correction of inaccurate personal data concerning them. They also have the right to request the completion of incomplete personal data — taking into account the purposes of processing — including by providing a supplementary statement.

To exercise their right to rectification, the data subject may contact an employee of the controller at any time.

d) Right to Erasure (Right to be Forgotten)

Every data subject has the right to request that the controller erase personal data concerning them without undue delay, if one of the following grounds applies and processing is not required:

The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
The data subject withdraws their consent on which the processing is based (Art. 6(1)(a) or Art. 9(2)(a) GDPR) and there is no other legal ground for the processing.
The data subject objects to the processing under Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or objects under Art. 21(2) GDPR.
The personal data has been unlawfully processed.
The erasure of personal data is required to comply with a legal obligation under Union or Member State law.
The personal data were collected in relation to information society services offered under Art. 8(1) GDPR.

If any of the above grounds applies and a data subject wishes to have their personal data erased, they may contact an employee of relticc GmbH at any time. The employee will ensure that the erasure request is fulfilled without undue delay.

If personal data has been made public by relticc GmbH and the company is obligated as controller under Art. 17(1) GDPR to erase it, relticc GmbH will take reasonable steps, considering available technology and implementation costs, to inform other controllers processing the published personal data that the data subject has requested the erasure of all links, copies, or replications of that data, unless processing is required. The employee of relticc GmbH will take appropriate measures on a case-by-case basis.

e) Right to Restriction of Processing

Every data subject has the right to request restriction of processing under the following conditions:

The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify its accuracy.
The processing is unlawful, and the data subject opposes erasure and requests restriction instead.
The controller no longer needs the personal data for processing, but the data subject requires it for exercising, defending, or asserting legal claims.
The data subject has objected under Art. 21(1) GDPR and it is not yet determined whether the controller’s legitimate grounds override those of the data subject.

If any of the above conditions applies, a data subject may request restriction of their personal data stored by relticc GmbH at any time. The employee will enforce the restriction.

f) Right to Data Portability

Every data subject has the right to receive personal data they have provided to a controller in a structured, commonly used, and machine-readable format. They also have the right to transmit this data to another controller without hindrance, provided processing is based on consent (Art. 6(1)(a) or Art. 9(2)(a) GDPR) or contract (Art. 6(1)(b) GDPR) and is carried out by automated means, unless processing is necessary for a public interest task or the exercise of official authority.

The data subject may also request direct transmission from one controller to another where technically feasible, without affecting the rights and freedoms of others. To exercise this right, the data subject may contact an employee of relticc GmbH at any time.

g) Right to Object

Every data subject has the right to object at any time, for reasons arising from their particular situation, to the processing of personal data concerning them, which is based on Art. 6(1)(e) or (f) GDPR, including profiling based on these provisions.

In the event of an objection, relticc GmbH will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.

If personal data is processed for direct marketing, the data subject may object at any time to such processing, including profiling related to direct marketing. Upon objection, relticc GmbH will cease processing personal data for these purposes.

The data subject may also object to processing for scientific, historical, or statistical purposes under Art. 89(1) GDPR, unless processing is necessary for performing a task in the public interest. Objections may be made directly to any employee of relticc GmbH or via automated means where technically feasible.

h) Automated Decision-Making Including Profiling

Every data subject has the right not to be subject to a decision based solely on automated processing — including profiling — that produces legal effects concerning them or similarly significantly affects them, unless the decision (1) is necessary for entering into or performing a contract with the data subject, (2) is authorized by Union or Member State law with adequate safeguards, or (3) is based on explicit consent.

If the decision is necessary for a contract or based on consent, relticc GmbH takes reasonable measures to safeguard the rights, freedoms, and legitimate interests of the data subject, including the right to obtain human intervention, to express their point of view, and to contest the decision.

To exercise rights regarding automated decision-making, the data subject may contact an employee of the controller at any time.

i) Right to Withdraw Consent

Every data subject has the right to withdraw consent for the processing of personal data at any time.

To exercise the right of withdrawal, the data subject may contact an employee of the controller at any time.

10. AUTOMATED DECISION-MAKING

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.