1. An overview of data protection
The following information gives an overview of what will happen with your personal data when you visit this website.
The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please see the sections under 4. “General information and mandatory information”.
Data recording on this website
Who is the responsible party for the recording of data on this website?
The data on this website is processed by the operator of the website (me, Nicola Obert), whose contact information is available in the Legal Details
on this website.
How do I record your data?
Some of your data I collect because you share it with me. This may, for instance, be information you transmit to me by e-mail.
Other data is automatically recorded by my webhosting provider when you visit my website. This data comprises primarily technical information (e.g. web browser, operating system, or time the site was accessed). This information is recorded automatically when you access this website.
What are the purposes I use your data for?
A part of the data is generated to guarantee the error-free provision of the website. Other data may be used to analyse your user patterns. However, analysing tools or third party tools (e.g. cookies, Google Analytics) are not implemented on this website.
What rights do you have concerning your data?
You have at all times the right to receive free of charge information about the source, recipients and purpose of your stored personal data. You also have the right to demand rectification or deletion of this data. If you have further questions on this or any other data protection related matters, please do not hesitate to contact me at any time by using the address in the Legal Details. Additionally, you have the right to file a complaint with the competent supervisory authority.
Moreover, under certain circumstances, you have the right to demand the restriction of the processing of your personal data. For details, please see the section “Right to demand processing restrictions”.
This website is being hosted by an external service provider (webhosting provider). Personal data collected on this website is stored on the servers of the webhosting provider. This data may primarily include IP addresses, contact requests, metadata and communication data, contract data, contact data, names, web page accesses, and other data generated through a website.
The webhosting provider is used for the purpose of fulfilling the contract with my potential and existing customers (Art. 6 par. 1 (b) GDPR) and in the interest of secure, fast and efficient provision of my website by a professional provider (Art. 6 par. 1 (f) GDPR).
My webhosting provider will only process your data to the extent which is necessary to fulfil their performance obligations, and they will follow my instructions regarding these data.
3. Conclusion of Data Processing Agreements
In order to guarantee processing of your data in compliance with German data protection regulations, I have concluded Data Processing Agreements with my webhosting provider and with the company providing my address in the Legal Details (Postflex).
4. General information and mandatory information
I, the operator of this website (Nicola Obert) take the protection of your personal data very seriously. I treat your personal data as confidential and in compliance with German statutory data protection regulations and this Data Protection Declaration.
Whenever you use this website, several personal data will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data I collect and what I use this data for. It also explains how, and for which purpose this is carried out.
I herewith point out to you that the transmission of data via the Internet (i.e. through e-mail communication) may include security gaps. It is not possible to completely protect data against third party access.
Information about the responsible party
The responsible party for data processing on this website is:
c/o Postflex # 408
Emsdettener Str. 10
Telephone: +49 7666 9136361
Telefax: +49 7666 9136362
The responsible party is the natural person or legal entity that single-handedly or jointly with others makes decisions on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
Revocation of your consent to the processing of data
Many data processing procedures are possible only with your express consent. You can at any time revoke a consent you have already given me. To do so, it is sufficient that you send me an informal notification by e-mail. The lawfulness of data processing carried out prior to the revocation remains unaffected of this revocation.
Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)
IN THE EVENT THAT DATA IS PROCESSED ON THE BASIS OF ART. 6 PAR. 1 (E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS RESTED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU MAKE AN OBJECTION, I WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS I CAN SUPPLY PROOF OF COMPELLING REASONS WORTHY OF PROTECTION FOR THE DATA PROCESSING WHICH PREDOMINATE YOUR INTERESTS, RIGHTS AND LIBERTIES, OR UNLESS THE DATA PROCESSING SERVES THE ASSERTION, EXERCISING OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PAR. 1 GDPR).
IF YOUR PERSONAL DATA IS PROCESSED IN ORDER TO MAKE DIRECT ADVERTISING, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21 PAR. 2 GDPR).
Right to file a complaint with the competent supervisory authority
In the event the GDPR is violated, you are entitled to file a complaint with the competent supervisory authority. Competent supervisory authority concerning data protection matters is the federal state Data Protection Officer (Landesdatenschutzbeauftragter) of the German federal state in which my company is based. The address is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Phone: +49 711 6155410
The right to file a complaint exists regardless of any other administrative or judicial legal remedies.
Right to data portability
You have the right to demand that data I automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you demand the direct transfer of the data to another responsible party, this will be done only if it is technically feasible.
For security reasons and to protect the transmission of confidential content, such as enquiries you submit to me as the website operator via a contact form, this website uses SSL encryption. You can see that a connection is encrypted when the address bar of the browser switches from „http://“ to „https://“ and the image of a little lock appears.
If the SSL encryption is activated, data you transmit to me cannot be read by third parties.
Information about, rectification and deletion of data
Within the scope of the applicable statutory provisions, you have the right to at any time and free of charge demand information about your stored personal data, its source and recipients as well as the purpose of the data processing. You may also have a right to have your data rectified or deleted. If you have further questions on this or the subject matter of personal data, please do not hesitate to contact me at any time by using the address in the Legal Details.
Right to demand processing restrictions
You have the right to demand the restriction of the processing of your personal data. To do so, you may contact me at any time by using the address in the Legal Details. The right to demand the restriction of data processing applies in the following cases:
If you dispute the correctness of your personal data stored by me, I usually need some time to examine this. During the time of the examination, you have the right to demand the restriction of the processing of your personal data.
If the processing of your personal data was/is conducted unlawfully, you may demand the restriction of the processing of your personal data instead of their deletion.
If I do not need your personal data any longer, but you need them to exercise, defend or assert legal claims, you have the right to demand the restriction of the processing of your personal data instead of their deletion.
If you have made an objection pursuant to Art. 21 par. 1 GDPR, your interests and my interests have to be balanced. As long as it has not been determined whose interests predominate, you have the right to demand the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data may be processed – except for their recording – only with your consent, or in order to assert, exercise or defend legal claims, or to protect the rights of other natural persons or legal entities, or for reasons of an important public interest of the European Union or of a EU member state.
Objection to unsolicited promotional e-mails
I herewith object to the use of my contact details, which are published within the context of mandatory legal information (Legal Details), to send me promotion material and information which I have not expressly requested. I as the operator of this website expressly reserve the right to take legal steps in the event of unsolicited delivery of promotional information, for instance via spam e-mails.
5. Recording of data on this website
Server log files
The webhosting provider of this website automatically collects and stores information in so-called server log files, which your browser transmits to me automatically. The following information is being collected:
Time and date of call
Operating system and browser of accessing computer
IP address of accessing computer
URL which is being called (my website)
URL which has called my website (referrer URL)
This data will not be merged with other data sources.
This data is recorded on the basis of Art. 6 par. 1 (f) GDPR. The operator of the website has a legitimate interest that her website is being presented and optimised in a technically error-free way. In order to achieve this, server log files must be recorded.
Enquiry by e-mail, telephone or fax
If you contact me by e-mail, telephone or fax, your enquiry, including all resulting personal data (e.g. name, address) will be stored and processed by me for the purpose of handling your enquiry. I will not pass this data on without your consent.
The processing of this data is based on Art. 6 par. 1 (b) GDPR, provided your enquiry is related to the fulfilment of a contract, or is necessary to take pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 par. 1 (a) GDPR) and/or on my legitimate interests (Art. 6 par. 1 (f) GDPR), since I have a legitimate interest in the efficient handling of enquiries addressed to me.
The data you have sent me via enquiries remain with me until you ask me to delete it, or until you revoke your consent to store the data, or until the purpose of storing the data does not apply anymore (e.g. after completion of your enquiry). Mandatory statutory provisions - in particular legal retention periods - remain unaffected.
Processing of data (customer and contract data)
I collect, process and use personal data only to the extent which is necessary for the creation, content, or change of the legal relationship (inventory data). This is done on the basis of Art. 6 par. 1 (b) GDPR, which permits the processing of data in order to fulfil a contract or to take pre-contractual measures. I collect, process and use personal data when this website is being utilised (usage data) only to the extent which is necessary to facilitate the utilisation of the service to the user or to charge the user for the utilisation of the service.
The collected customer data will be deleted after completion of the order or after termination of the business relationship. Legal retention periods remain unaffected.
Data transfer when concluding contracts for services and digital content
I transmit personal data to third parties only if this is necessary within the framework of fulfilling the contract.
No further transfer of data will be performed unless you have given your express consent to the transfer. I will not relay your data to any third parties, for instance for promotional purposes, without your express consent.
The processing of data is based on Art. 6 par. 1 (b) GDPR, which permits the processing of data in order to fulfil a contract or to take pre-contractual measures.
6. My own services
Handling of applicant data
I offer you the opportunity to submit freelance job applications to me (e.g. by e-mail or by post). In the following, I will inform you about the scope, purpose and use of your personal data collected in the context of the application process. I assure you that the collection, processing and use of your data will occur in compliance with applicable data protection law as well as any other applicable legal provisions and that your data will be treated in strict confidence.
Scope and purpose of the collection of data
If you submit a freelance job application to me, I will process your related personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.), insofar as this data is required to decide whether a freelance cooperation shall be established. The legal basis for this is Art. 6 par. 1 (b) GDPR (general contract initiation) and – provided you have given me your consent – Art. 6 par. 1 (a) GDPR. You may revoke your consent at any time.
If your freelance job application is successful, the data you have submitted will be stored in my data processing system on the basis of Art. 6 par. 1 (b) GDPR for the purpose of establishing a freelance cooperation.
Retention period for applicant data
If I am unable to make you a freelance job offer, or you reject such a job offer, or you withdraw your application, I reserve the right to retain your submitted data on the basis of my legitimate interests (Art. 6 par. 1 (f) GDPR) for up to 6 months from completion of the application procedure (rejection or withdrawal of the application). Subsequently, the data will be deleted, and the physical application documents will be destroyed. The retention serves in particular evidence purposes in the event of a legal dispute. If it is obvious that the data will be required after the expiry of the 6-month period (e.g. due to an imminent or pending legal dispute), deletion will only take place when the purpose for further retention no longer applies.
Longer retention may also take place if you have given a corresponding consent(Art. 6 par. 1 (a) GDPR) or if legal retention obligations are opposed to the deletion.
Admission to the applicant pool
If I cannot make you a freelance job offer, there may be the possibility that you join my applicant pool. In case of admission, all documents and information included in the application will be transferred to the applicant pool in order to contact you when suitable job offers arise.
Admission to the applicant pool is based exclusively on your express consent (Art. 6 par. 1 (a) GDPR). You submit your consent voluntarily, and the submission has no relation to the ongoing application procedure. You can revoke your consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, provided there are no legal reasons for retention.
The data stored in the applicant pool will be irrevocably deleted at the latest two years after the consent has been given.