I. Name and address of the person responsible
The person responsible in terms of the basic data protection regulation and other national data protection laws of the member states and other data protection regulations is the:
Educational Greenhouse gGmbH
represented by Corinna Michal-Gabriel
Sankt Barbara Straße 1
II. Name and address of the Data Protection Officer(s)
According to the criteria of the BDSG and the DSGVO we are not obliged to appoint a data protection officer or a data security officer.
III. general information on data processing
1. the scope of processing of personal data
We process personal data of our users only to the extent necessary to provide a functional website and our contents and services. The processing of personal data of our users is regularly only carried out with the user’s consent. An exception is made in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by legal regulations.
2. legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU Data Protection Basic Regulation (DSGVO) serves as the legal basis.
In the processing of personal data required for the performance of a contract to which the data subject is a party, Article 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis.
In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 para. 1 lit. d DSGVO serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6 (1) lit. f DSGVO serves as the legal basis for the processing.
3. data deletion and storage period
The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage is no longer applicable. Furthermore, data may be stored if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the person responsible is subject.
Blocking or erasure of the data is also carried out when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
IV. Provision of the website and creation of log files
1. description and scope of data processing
Whenever you visit our website, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected:
Information about the browser type and version used, the operating system, the Internet service provider and the IP address of the user
Date and time of access Websites from which the user’s system accesses our website
The data is also stored in the log files of our system.
These data are not stored together with other personal data of the user.
2. legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f DSGVO.
3. purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
It is stored in log files to ensure the functionality of the website. In addition, the data is used to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes also include our legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f DSGVO.
4. duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose of their collection. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended.
In the case of the storage of data in Logfildes, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users will be deleted or alienated, so that an assignment of the calling client is no longer possible.
5. possibility of objection and removal
The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. There is therefore no possibility of objection on the part of the user.